S 3.34 Basic training on the administration of the archive system

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: Administrator, Head of IT, Archive Administrator

In order to be able to properly and safely administer an archive system, the persons in charge, meaning specifically the Administrators and Archive Administrators, must be familiar with the used systems. For this, the Archive Administrators and Administrators responsible must be trained. This should prevent configuration errors and incorrect behaviour. The training should at least cover the following subjects:

• system architecture and security mechanisms of the used archive system and the underlying operating system,
• installation and operation of the archive system, handling the archiving media used, and labelling the archiving media (see also S 2.3 Data media control),
• application conditions (air-conditioning, etc.) of the archive system and the archiving media,
• documentation of the administrative activities,
• logging the system events on the archive system,
• procedure for upgrading the databases (see S 2.263 Regular regeneration of archived data resources and S 2.264 Regular regeneration of encrypted data in archiving),
• basic concepts of encryption and digital signature when cryptographic procedures are used,
• procedure for destroying disposed of archiving media,
• system monitoring and maintenance (operating) of the archive system,
• escalation procedures, e.g. for
  • non-observance of response times,
  • falling below the residual memory capacity of the archive media,
  • manipulation or sabotage of the archive system or force majeure events, as well as
  • unauthorised accesses to archived data.

The Administrator and Archive Administrator training must be documented. The Administrators and Archive Administrators should be trained accordingly in the event of system changes.

Review questions:

• Are the Archive Administrators and Administrators responsible trained for their field of responsibility?
• System changes to the archive system: Are Administrators and Archive Administrators trained regarding the changes?