C5 introduction

Publisher

Bundesamt fuer Sicherheit in der Informationstechnik (BSI)

URL

https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Empfehlungen-nach-Angriffszielen/Cloud-Computing/Kriterienkatalog-C5/C5_Einfuehrung/C5_Einfuehrung_node.html

Published

unknown

Updated

unknown

Accessed

2026-10-02

HTTP status

200

License

BSI website terms; no-redistribution; short excerpts and locators only

Source notes citing this source

• Every C5 attestation must cover at least all basic criteria; additional criteria tighten or complement them and are covered only if the provider includes them. in context
• C5:2020 has 121 criteria in 17 subject areas, and C5:2026 has 168 criteria with added sub-criteria. in context
• The BSI says a C5 Type 2 audit, which shows operating effectiveness over an audit period, is required for an appropriate informative value, whereas Type 1 only shows design at a point in time. in context

Cite this source record

APA

WarmTransfer. (2026, October 2). C5 introduction. WarmTransfer. https://warmtransfer.net/knowledge/sources/bsi-bund-c5-introduction

BibTeX

@misc{warmtransfer-bsi-bund-c5-introduction,
  title  = {C5 introduction},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/bsi-bund-c5-introduction},
  note   = {Bundesamt fuer Sicherheit in der Informationstechnik (BSI), accessed 2026-10-02}
}