Post on 13-Dec-2014
description
www.dpconline.orgOur digital memory accessible tomorrow
What’s the problem?Some basics on risk‘Whole class’ exampleParallel your own exampleSome final thoughts
William Kilbridewilliam @dpconline.org
Risk Management in digital preservation
www.dpconline.orgOur digital memory accessible tomorrow
Digital preservation typically makes bleak reading …
www.dpconline.orgOur digital memory accessible tomorrow
• Let’s go back to first principles …
• Digital data has value. It is an asset.• It has potential and creates new opportunities.• Use gives rise to direct and indirect outcomes.• ...but...
• Deployment depends on software, hardware and people.
• Software, hardware and people change.• ...therefore...
• Access is not guaranteed without (some) action• Value, opportunity, impact not guaranteed• Potential outcomes – ie health or research – lost
www.dpconline.orgOur digital memory accessible tomorrow
Digital preservation is not about ‘data’:Digital preservation is not about ‘access’: Digital preservation is not about ‘risk’:
it’s about people and opportunity
…and because people and technology continue to change it’s an ongoing process
www.dpconline.orgOur digital memory accessible tomorrow
Risk management and preservation?
•Preservation is an ongoing process involving risks•Most organisations have existing risk management processes...so...•Formal risk management will help•And can fit with operational management...in fact...•There are some regulatory requirements that can help you get the ear of senior managers
www.dpconline.orgOur digital memory accessible tomorrow
Simple Risk Assessment
Identify a risk ...Identify the consequences of that riskWhat is it’s likelihood?What is it’s impact?Risk Score: L x IHow frequently does the risk occur?How often do we need to check?Who owns the risk? How will we respond to the risk?How does our response change likelihood and impact?
www.dpconline.orgOur digital memory accessible tomorrow
Generic Digital Preservation Risks (there are more!)
File format obsolesenceMedia degradation or failureMedia obsolesenceBarriers to access (eg encryption)Insufficient resource discovery metadataInsufficient representational metadataInsufficient control (eg copyright)Authenticity and provenance is unclearMultiple copies are not synchronisedVirus, trojans etc (aka malware)Disruptive technologiesPoorly understood service dependencies…
www.dpconline.orgOur digital memory accessible tomorrow
RISK Likelihood Impact Score Frequency Owner Response
Media will degrade
5 5 25 ongoing Technology watchGood media storageRefreshmentRoutine checks of mediaKeep copies on different media...
Media will fail outright
3 5 15 ongoing Technology watchCareful procurementWarranties and liabilitiesMultiple copiesDevelop migration plan...
Media obsolesence
5 5 25 ongoing Technology watchRefreshmentRoutine checks of mediaMultiple media...
Starting with risks ....
www.dpconline.orgOur digital memory accessible tomorrow
RISK Likelihood Impact Score Frequency Owner Actions to maintain mitigation
Media will degrade
3 1 3 ongoing Technology watchGood media storageRefreshmentRoutine checks of mediaKeep copies on different media...
Sudden media failure
1 4 4 ongoing Technology watchCareful procurementWarranties and liabilitiesMultiple copiesDevelop migration plan...
Media obsolesence
1 3 3 ongoing Technology watchRefreshmentRoutine checks of mediaMultiple media...
Post mitigation risks ....
www.dpconline.orgOur digital memory accessible tomorrow
Two Worked ExamplesA whole class example live on screen
Get your notebooks and .......Write out TWELVE headings as follows:
Risk, Consequence, Likelihood, Impact, Score, Proximity, Owner, Responses, New likelihood, New impact, New score, Frequency of review
Do this twice, on two different pages.
The first example we will do as a group, The second one you should do on your own or with colleagues
www.dpconline.orgOur digital memory accessible tomorrow
Example 1: The Historic Parish ArchiveArchaeological Excavation: (closed)c. 1000 pages digitized text (TIFFS and PDFs)c. 500 photographs (TIFFS and JPEGS)c. 100 data tables (held as text)c. 25 Excel spreadsheets
Architectural survey of building: (closed)c. 3000 images in JPEG format25 CAD plans
Parish newsletters and website: (ongoing)c. 500 document in variety of wp formatsc. 150 web pages and images
Oral History: (ongoing)c. 25 audio recordings
Music performance: (ongoing)10 hours of digital recordings
Parish registers: (closed)Circa 1000 pages scanned (TIFFS)
Based loosely on the Christ Church Spitalfields Archive, from ADShttp://ads.ahds.ac.uk/catalogue/resources.html?spitalfields_var_2001
www.dpconline.orgOur digital memory accessible tomorrow
Example 2: The collection that worries youExisting Digital Archives:
Digitized text (TIFFS and PDFs)Photographs (TIFFS and JPEGS)Data tables and spreadsheets...
Ongoing data flows:Outputs from EDRMSDocument in variety of office formatsWeb pages and images...
Things you know are coming: Digital sound and visionOutputs from digitzationCorporate databases...
www.dpconline.orgOur digital memory accessible tomorrow
RISK That
Likelihood ...
Impact ...
Score ...
Frequency ...
Owner ...
Response ...
New Likelihood ...
New Impact ...
New Score ....
Frequency of Review
...
So .... who’d like to start?
www.dpconline.orgOur digital memory accessible tomorrow
RISK That
Likelihood ...
Impact ...
Score ...
Frequency ...
Owner ...
Response ...
New Likelihood ...
New Impact ...
New Score ....
Frequency of Review
...
Any examples you’d like to share?
www.dpconline.orgOur digital memory accessible tomorrow
high riskhigh risk
low low consequenceconsequence
high riskhigh risk
high high consequenceconsequence
low risklow risk
low low consequenceconsequence
low risklow risk
high high consequenceconsequence
Consequences
Risks
low risklow risk
high high consequenceconsequence
www.dpconline.orgOur digital memory accessible tomorrow
www.dpconline.orgOur digital memory accessible tomorrow
Richard Blake, Archives Sector Development, The National Archives
www.dpconline.orgOur digital memory accessible tomorrow
Risk AppetiteExplosive RisksToxic risksRisk and opportunityProject management (Prince2)Organisational risk register
More Risk Management ...
www.dpconline.orgOur digital memory accessible tomorrow
Some basics on risk‘Whole class’ exampleParallel your own exampleSome final thoughts
William Kilbridewilliam @dpconline.org
Risk Management in digital preservation