##Risk Description

= Risk Description =

## Detailed description of this risk and its possible implications.
## E.g. If one of the car's tires suffers a puncture, we may run off the road.

We have identified two plausible causes to why the DOMS may not obtain a Trusted Digital Repository (TDR) certification. The most probable cause is that no institution will be ready with a certification framework by the time the DOMS is ready, as no such framework currently exists and the institutions, such as DPE, that are working on it are only making slow progress.

The second reason why it is uncertain whether the DOMS can get a TDR certification is due to uncertainties regarding the DOMS design and the future production environment that the DOMS will be living in. So far we have identified these uncertainties:

 * The quality of the technical implementation of bit preservation provided by the IT department may not meet the requirements for a TDR certification.
 * The organisational procedures applied in the production environment, which the DOMS will be living in, may not meet the requirements for a TDR certification. An example of a procedure that may cause problems could be the way the back-ups are handled. 
 * The DOMS project may also end up having a problem with the design regarding achieving a TDR certification. The reason is that we plan to adopt the access and rights control framework from the AAI project and if it turns out that it does not meet the requirements for obtaining a TDR certification then we have a problem.

== When to react? ==

## When must we respond to the risk? E.g. When the event occurs or already when we see the warning signs?
## E.g. We must react if we hear a hissing sound.

Unfortunately, it is probably not possible for us to realise these problems until we are at the end of the DOMS project, or at least very close to the end. However, we must keep an eye on the DPE project and the trends regarding definition of a TDR to see if there is anything we can do to mitigate this risk.

== Reaction ==

## Detailed description of how to react on the risk and which actions to take, if it is imminent.

## There exists 4 basic reactions:
## 1: Accept the risk.
## 2: Eliminate the cause to the risk.
## 3: Mitigate the probability or the consequence of the risk.
## 4: Delegate the risk to another party, e.g. by outsourcing it or take out insurance for it.

## E.g. We accept the risk and change the tire if we suffer a puncture.

The question on whether DOMS can obtain a TDR certification is crucial to the long-term goal of this project, however, in the beginning we can live with the risk that it cannot obtain a TDR certification. We need the DOMS no matter what, but we must keep an eye on the trends and the progress of the DPE project to see if there is anything we can do to mitigate or eliminate this risk.

== Responsible Persons ==

The below persons are responsible for continuously monitoring and acting on this risk:

## Add a bullet list with links to the wiki pages of the responsible persons here:
## E.g.
## * [:JohnDoe: John Doe]