Workflow:Archival Forensics workflow (storage media deposit)

Archival Forensics workflow (storage media deposit)
Status:	Experimental
Tools:	BitCurator FTK (Forensic Toolkit)
Input:	Request to forensically process a digital deposit (storage media) to the University of Glasgow Archives & Special Collections, as part of of the Digital Archiving workflow (see Further Information).
Output:	A verified, authentic copy of storage media content exported as a logical or physical image file, with or without forensic processing.
Organisation:	Archives and Special Collections (ASC), University of Glasgow

Workflow Description

START

A request to forensically process a digital deposit (storage media) to the University of Glasgow Archives & Special Collections, as part of of the Digital Archiving workflow.

PRE-ACQUISITION APPRAISAL

Processes for evaluating whether a deposit request will be accepted by the University Archives.

1. Check the deposit request against the Archives & Special Collections collection development policy - does the request align with the core collecting areas?
2. Prepare a records survey and/or pre-accession assessment of the proposed deposit.
3. Evaluate the results of the records survey against the Appraisal & Retention policy, which:
   • addresses issues pertaining to selection and long-term retention of digital objects
   • extends the collections development policy
   • ensures that retention decisions are balanced between value and capacity to preserve for the long-term; and
   • provides clarity to avoid assumptions over digital storage costs and availability.
4. Decide whether the requested deposit aligns with policies:
   • If not, re-evaluate acquisition and/or reject deposit.
   • If yes, proceed to Acquisition.

ACQUISITION

Processes for acquiring digital materials by transfer, donation, or purchase.

1. Follow the methodology in the Space data and information transfer systems — Producer-archive interface — Methodology abstract standard (PAIMAS) ISO 20652:2006 standard. The standard "identifies, defines and provides structure to the relationships and interactions between an information producer and an archive. It defines the methodology for the structure of actions that are required from the initial time of contact between the producer and the archive until the objects of information are received and validated by the archive." (ISO). For more information, see Acquisition and appraisal, Digital Preservation Handbook (DPC).
2. Follow the Accepted file formats/media procedure, which:
   • Specifies decisions on file formats and/or storage media that the University Archives will accept.
   • Aligns with preservation planning decisions for format normalisation; and capability to access storage media (esp. legacy media, e.g. floppy or zip disks).
   • For a summary table of options, see the Acquisition workflow section in Acquisition and appraisal, Digital Preservation Handbook (DPC).
3. For acquisitions deposited in physical storage media:
   • Place all incoming items in quarantine area on arrival, inspect for pest infestation and mould; and follow handling and moving procedures.
   • Create physical conservation and preservation report, documenting all actions on the acquired media.
   • Proceed to Accessioning.
4. For acquisitions deposited digitally (e.g. file transfer):
   • Proceed to Accessioning.

ACCESSIONING

Process of formally registering deposit into the University Archives, which enables intellectual control over the digital materials.

1. Generate a unique accession number, based on the University Archives' archival processing guidelines.
2. Compare the file manifests generated during Acquisition to make sure that the transfer includes everything that was deposited by the source.
3. List the accession number into the University's Collections Management System for cataloguing. Cataloguing processes include decisions over the system of arrangement and level of description that will be used for the deposited materials; definition of access and reproduction conditions; and documentation via descriptive metadata.
4. Decide whether archival forensic processing is required:
   • If Yes, follow the Archival Forensics workflow.
5. Proceed to Transfer.

TRANSFER

Processes for transferring digital materials to the University Archives.

1. Choose a method for transferring files:
   • Copy files from source media. OR
   • Create a disk image from source storage media. OR
   • Request that digital materials are submitted as a BagIt container.
2. Check digital materials for viruses. See Select and transfer workflow in the TNA guide (section 1.3) for a reasonable process. Depending on the results of virus checks:
   • if virus is found, quarantine and attempt removal; and/or request clean versions from source. If all these fail, prepare a report documenting actions and re-evaluate acquisition.
   • if virus-free, proceed with transfer.
3. Generate checksums to verify data integrity during transmission and/or storage:
   • For digital acquisitions in situ, it might be appropriate to first store files in a temporary location for virus and/or integrity checks, before transferring to process store. Not applicable to all scenarios.
   • Transfer digital materials to Process store (e.g. network drive).
4. Use tools to identify file types and validate file formats (e.g. DROID, JHOVE), then proceed to Appraisal.