Risk Management & Mitigation Flashcards

What is fixity checking in digital preservation risk management, and what does it verify?

Answer: Generating and comparing checksums to detect unintended changes to digital files

Fixity checking uses cryptographic checksums (e.g., MD5, SHA-256) to verify that digital files have not been altered or corrupted since their last verification.

Which document establishes the procedures for returning an archival repository to normal operations after a disaster, distinct from initial emergency response?

Answer: The Continuity of Operations Plan (COOP)

A COOP addresses how an institution sustains and restores essential functions during and after a disaster, going beyond immediate emergency response.

A repository stores nitrate film. Which risk factor makes this material uniquely dangerous compared to other archival media?

Answer: Nitrate film is highly flammable and can self-ignite at relatively low temperatures

Cellulose nitrate film is highly flammable, can self-ignite at temperatures as low as 106°F, and burns intensely even underwater, requiring specialized storage.

The concept of 'risk transfer' in archival risk management is best exemplified by which action?

Answer: Purchasing insurance to cover potential collection losses

Risk transfer shifts the financial burden of a potential loss to a third party, most commonly through insurance policies for collections.

When freezing water-damaged archival materials to halt mold growth and enable later treatment, what is the recommended maximum time before freezing should begin?

Answer: Within 24–48 hours

Mold can begin to grow within 24–48 hours of water damage, so freezing should begin within this window to halt biological deterioration.

Which of the following is an example of 'risk avoidance' as a risk management strategy in an archival context?

Answer: Declining to accept a donation of chemically unstable nitrate film

Declining to accept inherently hazardous materials eliminates the risk entirely by choosing not to engage in the risk-generating activity.

A newly hired archivist finds that the repository's disaster plan has not been updated in eight years. Which step is MOST important to complete first in the plan revision process?

Answer: Conduct a current risk assessment to identify what threats and vulnerabilities have changed

Updating the risk assessment first ensures the revised plan addresses current and relevant threats, rather than building on an outdated threat landscape.