Hurley, Grant. "A Standard of Practice for Information Protection in Archives and Records Management: Discussion Paper" (InterPARES Trust, 2015). Personal communication from the author.
Existing Citations
control architecture (p.5): The control architecture includes structural mechanisms that obtain security objectives through access control, functional units, ... change control, and lower surety non-architectural units. (†1445)
oversight (p.4): Oversight comes from laws, owners, the board of directors or similar entities, auditors, and the chief executive officer or other director. It produces a set of duties to protect that include legal and regulatory duties, contractual duties, and self-imposed duties. Oversight is also tasked with responsibility for making certain that the duties imposed are carried out. (†1447)
