Extract - A risk assessment of the Piql Preservation Service

0 Preface In one of Piql's ongoing research projects, PreservIA, - supported by the Norwegian Research Council, one of the tasks has been to make a detailed study related to a risk assessment of Piql's Services of providing ultra- secure data storage and long-term digital preservation. The aim of the PreservIA project is to further improve the Piql Services to better ensure the security, immunity and authenticity of the information stored on the storage medium, the piqlFilm. The Norwegian Defence Research Establishment that has vast experience, and is a trusted authority globally on such risk assessments, was asked – and kindly accepted to perform this task in the project. By performing a risk assessment to identify the Piql Services’ vulnerabilities and security challenges, it has been established that it is the most appropriate method for preservation of digital data available today. The clearest benefit of the Piql Services is being a migration-free medium. This leads to saving resources, minimized risk for online manipulation or theft of data, and no manipulation, corruption or loss of data during a migration process. Several theoretical worst-case scenarios reveal some vulnerabilities such as fire and the threat of an insider. These revelations offer Piql a chance to develop even stronger products and services, and thus distance themselves further from other migration based storage mediums in a positive direction. Since the report "A risk assessment of the Piql Preservation Services" was published in June 2016, Piql have taken several measures to further improve Piql Services as proposed by the Norwegian Defence Research Establishment in their report. This extract is a condensed summary of the 174-page report plus that it contains an overview of measures Piql have taken to further minimize risk based on recommendations in the report. The assessment also functions as a guide for current and future Piql Partners since the report divides the world in three zones based on climate, development level and political stability. A Piql Partner can by determining which zone he belongs to, easily see which threats and hazards may threaten their production or storage facilities, and thus get an indication of what to include in their own risk and vulnerability assessments.

Page | 3