1. Overview

1.4 Terms of Use

C3A can be used by cloud service providers as well as cloud service customers: **• **A cloud service provider can demonstrate compliance with criteria by providing evidence. To do so, the cloud service provider should select which criteria apply to the respective set of cloud services and then provide the relevant evidence through an audit. • A cloud service customer can use the framework to identify criteria within the various domains that he considers relevant. By using the framework, cloud customers can define their baseline level of sovereignty in the context of cloud computing and, for the audited services, assess the fulfilment of the criteria identified as important.

1.1 References

1.2 Identified Requirements

1.2 Related Regulation

2. Identified Requirements

3. Related Regulations

• BSI C3A - Criteria enabling Cloud Computing Autonomy -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik

  C3A - Criteria enabling Cloud Computing Autonomy

  Published under Creative-Commons-License CC-BY-ND 4.0 International.