New version: C3A Criteria enabling Cloud Computing Autonomy (v1.0-d985b4e7a9) – 0 new, 45 changed, 0 removed, 2 assignments

• Document: C3A Criteria enabling Cloud Computing Autonomy (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/CloudComputing/C3A_Cloud_Computing_Autonomy.pdf?__blob=publicationFile&v=10)
• Version: v1.0-d985b4e7a9
• Project: BSI
• Import: #2414, 24.10.2026 10:17, bsi

The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).

Taken over directly (additional fields, HTML of an unchanged text): 73 issues.

Review: 0 open, 47 applied, 0 rejected.

Changed sections (45)

• Criteria enabling Cloud Computing Autonomy (C3A) – title, text (before: C3A) [applied]
  BSI-C3A
• 1 Introduction – text [applied]
  BSI-C3A-1
• 1.2 EU Cloud Sovereignty Framework and BSI C5:2026 as the C3A foundation – text [applied]
  BSI-C3A-1.2
• 1.3 Structure – text [applied]
  BSI-C3A-1.3
• 1.4 Terms of Use – text [applied]
  BSI-C3A-1.4
• 1.5 Definitions – text [applied]
  BSI-C3A-1.5
• 2 Criteria, Additional Criteria and Supplementary Information – text [applied]
  BSI-C3A-2
• SOV-1 Strategic Sovereignty – text [applied]
  BSI-C3A-SOV-1
• SOV-1-01 Jurisdiction – text [applied]
  BSI-C3A-SOV-1-01
• SOV-1-02 Registered Office – text [applied]
  BSI-C3A-SOV-1-02
• SOV-1-03 CSP Effective Control – text [applied]
  BSI-C3A-SOV-1-03
• SOV-1-04 CSP Control Change – text [applied]
  BSI-C3A-SOV-1-04
• SOV-2 Legal & Jurisdictional Sovereignty – text [applied]
  BSI-C3A-SOV-2
• SOV-2-01 Extraterritorial Exposure – text [applied]
  BSI-C3A-SOV-2-01
• SOV-2-02 Audit Rights – text [applied]
  BSI-C3A-SOV-2-02
• SOV-2-03 State of Defense Takeover – text [applied]
  BSI-C3A-SOV-2-03
• SOV-3 Data Sovereignty – text [applied]
  BSI-C3A-SOV-3
• SOV-3-01 Data Residence – text [applied]
  BSI-C3A-SOV-3-01
• SOV-3-02 External Key Management – text [applied]
  BSI-C3A-SOV-3-02
• SOV-3-03 External Identity Provider – text [applied]
  BSI-C3A-SOV-3-03
• SOV-3-04 Logging and Monitoring – text [applied]
  BSI-C3A-SOV-3-04
• SOV-3-05 Client-Side Encryption – text [applied]
  BSI-C3A-SOV-3-05
• SOV-4 Operational Sovereignty – text [applied]
  BSI-C3A-SOV-4
• SOV-4-01 Operating Personnel – text [applied]
  BSI-C3A-SOV-4-01
• SOV-4-02 Remote Work – text [applied]
  BSI-C3A-SOV-4-02
• SOV-4-03 Redundant connectivity providers – text [applied]
  BSI-C3A-SOV-4-03
• SOV-4-04 SOC – text [applied]
  BSI-C3A-SOV-4-04
• SOV-4-04-C1 – text [applied]
  BSI-C3A-SOV-4-04-C1
• SOV-4-04-C2 – text [applied]
  BSI-C3A-SOV-4-04-C2
• SOV-4-05 Ingress Data Control – text [applied]
  BSI-C3A-SOV-4-05
• SOV-4-06 Update threat analysis – text [applied]
  BSI-C3A-SOV-4-06
• SOV-4-07 Data exchange monitoring – text [applied]
  BSI-C3A-SOV-4-07
• SOV-4-08 Data exchange gateways – text [applied]
  BSI-C3A-SOV-4-08
• SOV-4-09 Disconnect – text [applied]
  BSI-C3A-SOV-4-09
• SOV-4-10 Reconnect – text [applied]
  BSI-C3A-SOV-4-10
• SOV-5 Supply Chain Sovereignty – text [applied]
  BSI-C3A-SOV-5
• SOV-5-01 Software Dependencies – text [applied]
  BSI-C3A-SOV-5-01
• SOV-5-02 Hardware Dependencies – text [applied]
  BSI-C3A-SOV-5-02
• SOV-5-03 External Service Dependencies – text [applied]
  BSI-C3A-SOV-5-03
• SOV-5-04 Export Restriction – text [applied]
  BSI-C3A-SOV-5-04
• SOV-5-05 Capacity Management – text [applied]
  BSI-C3A-SOV-5-05
• SOV-6 Technology Sovereignty – text [applied]
  BSI-C3A-SOV-6
• SOV-6-01 Source Code Availability – text [applied]
  BSI-C3A-SOV-6-01
• SOV-6-02 Continuous Service Delivery – text [applied]
  BSI-C3A-SOV-6-02
• SOV-6-03 Software Development – text [applied]
  BSI-C3A-SOV-6-03

Labels (2)

• Languages: English [applied]
• Applicable: Germany [applied]

Propojené úkoly

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)