ISMS & Risk

BSI C5 for Cloud Providers

Prepare the C5 audit report per cloud service, criterion by criterion in the original wording

The BSI Cloud Computing Compliance Criteria Catalogue C5 is the benchmark against which customers in Germany measure a cloud service, from public authorities to healthcare. A provider that wants to present a C5 audit report has to substantiate every criterion for every service in scope. The cockpit manages cloud services with service and deployment model and keeps the implementation status of all criteria per service. It is based on the catalogue in the BSI's original wording, including the corresponding criteria the customer has to meet.

BSI C5
Features

Your benefits

1

A separate status per service

Every cloud service in scope has its own implementation status for all criteria, with a degree of implementation per domain.

2

Original wording, not paraphrase

Basic and additional criteria as well as supplementary information appear unchanged in the BSI's wording.

3

Ready for the auditor

Prepare a Type 1 or Type 2 report with audit period and auditor; an overdue follow-up report becomes visible.

Capabilities

All capabilities at a glance

  • Cloud services with service and deployment model
  • Implementation status of all C5 criteria per service
  • Basic and additional criteria in the original wording
  • Corresponding criteria for customers
  • Degree of implementation per domain
  • Type 1 or Type 2 report with audit period and auditor
  • C5 in the overview of all standards
Result

The auditor gets a substantiated status per service instead of a spreadsheet created just before the audit.

Experience BSI C5 for Cloud Providers live

Schedule a no-obligation demo – we will show you the module with your own use cases.