Overview
BSI C5 is the German cloud security standard and is increasingly required by clients and regulatory authorities.
To whom is the standard relevant?
A BSI C5 report is particularly suitable for companies that offer cloud services and want to provide their clients with recognised evidence of the implementation of appropriate security measures.
Typical areas of application include:
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Managed cloud services
- Data centres
- Public cloud
- Private cloud
Scope of services
- Audit according to BSI C5 criteria
- Type 1: design assessment
- Type 2: effectiveness assessment over a period of time
- Readiness assessment
Benefits
- Recognised evidence of cloud security
- High acceptance among German clients and contracting authorities
- Support in tenders
- Transparency over security measures
- Efficient combination with other assurance services
