The BSI says a C5 Type 2 audit, which shows operating effectiveness over an audit period, is required for an appropriate informative value, whereas Type 1 only shows design at a point in time.

Checked 2026-10-02

Vendor
BSI
Product
C5
Subsystem
report types
Deployment
multi-tenant
Region
de
Release range
C5:2020 and C5:2026
Checked
2026-10-02

Sources

Cite this note

APA

WarmTransfer. (2026, October 2). UC and CCaaS security certifications: source note ucaas-compliance-certifications-c5-type2-value. WarmTransfer. https://warmtransfer.net/knowledge/claims/ucaas-compliance-certifications-c5-type2-value

BibTeX

@misc{warmtransfer-claim-ucaas-compliance-certifications-c5-type2-value,
  title  = {UC and CCaaS security certifications: source note ucaas-compliance-certifications-c5-type2-value},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/ucaas-compliance-certifications-c5-type2-value},
  note   = {Source note ucaas-compliance-certifications-c5-type2-value, checked 2026-10-02}
}

Read in context