New version: C5:2026 Cloud Computing Compliance Criteria Catalogue (1.0.1-ab906417ae) – 1 new, 858 changed, 1 removed, 1 assignments

• Document: C5:2026 Cloud Computing Compliance Criteria Catalogue (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/CloudComputing/ComplianceControlsCatalogue/2026/C5_machine_readable.zip?__blob=publicationFile&v=4)
• Version: 1.0.1-ab906417ae
• Project: BSI
• Import: #2413, 24.10.2026 10:17, bsi

The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).

Taken over directly (additional fields, HTML of an unchanged text): 17 issues.

Review: 0 open, 861 applied, 0 rejected.

New sections (1)

• AM-01.02AC [applied]
  C5:2026-AM-01.02AC

Changed sections (858)

• Cloud Computing Compliance Criteria Catalogue (C5:2026) – title, text (before: C5:2026) [applied]
  C5:2026
• GC-01 Information on applicable law, jurisdiction, countries, partitions, regions, zones and locations – title, text (before: GC-01 Angaben zu anwendbarem Recht, Gerichtsbarkeit, Länder, Partitionen, Regionen, Zonen und Stan…) [applied]
  C5:2026-GC-GC-01
• GC-02 Information on availability and incident handling during regular operation – title, text (before: GC-02 Angaben zu Verfügbarkeit und Störungsbeseitigung im Regelbetrieb) [applied]
  C5:2026-GC-GC-02
• GC-03 Information on recovery parameters in emergency operation – title, text (before: GC-03 Angaben zu Wiederanlaufparametern im Notbetrieb) [applied]
  C5:2026-GC-GC-03
• GC-04 Information on the approach to ensuring service availability – title, text (before: GC-04 Angaben zum Ansatz zur Sicherstellung der Dienstverfügbarkeit) [applied]
  C5:2026-GC-GC-04
• GC-05 Information on how investigation requests from government agencies are handled – title, text (before: GC-05 Angaben zum Umgang mit Untersuchungsanfragen von staatlichen Stellen) [applied]
  C5:2026-GC-GC-05
• GC-06 Information on certifications or attestations – title, text (before: GC-06 Angaben zu Zertifizierungen oder Bescheinigungen) [applied]
  C5:2026-GC-GC-06
• OIS-01 Information Security Management System (ISMS) – title (before: OIS-01 Informationssicherheitsmanagementsystem (ISMS)) [applied]
  C5:2026-OIS-01
• OIS-01.01B – text [applied]
  C5:2026-OIS-01.01B
• OIS-01.02B – text [applied]
  C5:2026-OIS-01.02B
• OIS-01.03B – text [applied]
  C5:2026-OIS-01.03B
• OIS-01.01AC – text [applied]
  C5:2026-OIS-01.01AC
• OIS-01.01AS – text [applied]
  C5:2026-OIS-01.01AS
• OIS-02 Information Security Policy – title (before: OIS-02 Informationssicherheitsrichtlinie) [applied]
  C5:2026-OIS-02
• OIS-02.01B – text [applied]
  C5:2026-OIS-02.01B
• OIS-02.02B – text [applied]
  C5:2026-OIS-02.02B
• OIS-02.03B – text [applied]
  C5:2026-OIS-02.03B
• OIS-03 Interfaces and Dependencies – title (before: OIS-03 Schnittstellen und Abhängigkeiten) [applied]
  C5:2026-OIS-03
• OIS-03.01B – text [applied]
  C5:2026-OIS-03.01B
• OIS-03.02B – text [applied]
  C5:2026-OIS-03.02B
• OIS-03.03B – text [applied]
  C5:2026-OIS-03.03B
• OIS-03.04B – text [applied]
  C5:2026-OIS-03.04B
• OIS-03.05B – text [applied]
  C5:2026-OIS-03.05B
• OIS-03 Supplementary Information - Complementary Customer Criteria – text [applied]
  C5:2026-OIS-03.SI
• OIS-04 Segregation of Duties – title (before: OIS-04 Aufgabentrennung) [applied]
  C5:2026-OIS-04
• OIS-04.01B – text [applied]
  C5:2026-OIS-04.01B
• OIS-04.02B – text [applied]
  C5:2026-OIS-04.02B
• OIS-04.03B – text [applied]
  C5:2026-OIS-04.03B
• OIS-04.04B – text [applied]
  C5:2026-OIS-04.04B
• OIS-04.01AC – text [applied]
  C5:2026-OIS-04.01AC
• OIS-04.02AC – text [applied]
  C5:2026-OIS-04.02AC
• OIS-05.01B – text [applied]
  C5:2026-OIS-05.01B
• OIS-05.02B – text [applied]
  C5:2026-OIS-05.02B
• OIS-05.03B – text [applied]
  C5:2026-OIS-05.03B
• OIS-06 Contact with Relevant Government Agencies and Interest Groups – title (before: OIS-06 Kontakt zu relevanten Behörden und Interessengruppen) [applied]
  C5:2026-OIS-06
• OIS-06.01B – text [applied]
  C5:2026-OIS-06.01B
• OIS-07 Risk Management Policy – title (before: OIS-07 Richtlinie für Risikomanagement) [applied]
  C5:2026-OIS-07
• OIS-07.01B – text [applied]
  C5:2026-OIS-07.01B
• OIS-08 Application of the Risk Management Policy - Risk Assessment – title (before: OIS-08 Anwendung der Richtlinie für Risikomanagement - Risikobeurteilung) [applied]
  C5:2026-OIS-08
• OIS-08.01B – text [applied]
  C5:2026-OIS-08.01B
• OIS-08.02B – text [applied]
  C5:2026-OIS-08.02B
• OIS-08.03B – text [applied]
  C5:2026-OIS-08.03B
• OIS-08.04B – text [applied]
  C5:2026-OIS-08.04B
• OIS-08.05B – text [applied]
  C5:2026-OIS-08.05B
• OIS-08.06B – text [applied]
  C5:2026-OIS-08.06B
• OIS-08.01AC – text [applied]
  C5:2026-OIS-08.01AC
• OIS-08.02AC – text [applied]
  C5:2026-OIS-08.02AC
• OIS-08.01AS – text [applied]
  C5:2026-OIS-08.01AS
• OIS-09 Application of the Risk Management Policy - Risk Treatment – title (before: OIS-09 Anwendung der Richtlinie für Risikomanagement - Risikobehandlung) [applied]
  C5:2026-OIS-09
• OIS-09.01B – text [applied]
  C5:2026-OIS-09.01B
• OIS-09.02B – text [applied]
  C5:2026-OIS-09.02B
• OIS-09.03B – text [applied]
  C5:2026-OIS-09.03B
• OIS-09.04B – text [applied]
  C5:2026-OIS-09.04B
• OIS-09.05B – text [applied]
  C5:2026-OIS-09.05B
• OIS-09.06B – text [applied]
  C5:2026-OIS-09.06B
• OIS-09.07B – text [applied]
  C5:2026-OIS-09.07B
• OIS-10 Information Security in Project Management – title (before: OIS-10 Informationssicherheit im Projektmanagement) [applied]
  C5:2026-OIS-10
• OIS-10.01B – text [applied]
  C5:2026-OIS-10.01B
• Security Policies and Procedures (SP) – text [applied]
  C5:2026-SP
• SP-01 Documentation, Communication and Provision of Policies and Procedures – title (before: SP-01 Dokumentation, Kommunikation und Bereitstellung von Richtlinien und Verfahren) [applied]
  C5:2026-SP-01
• SP-01.01B – text [applied]
  C5:2026-SP-01.01B
• SP-01.02B – text [applied]
  C5:2026-SP-01.02B
• SP-01.03B – text [applied]
  C5:2026-SP-01.03B
• SP-01.04B – text [applied]
  C5:2026-SP-01.04B
• SP-02 Review and Approval of Policies and Procedures – title (before: SP-02 Ãœberprüfung und Freigabe von Richtlinien und Verfahren) [applied]
  C5:2026-SP-02
• SP-02.01B – text [applied]
  C5:2026-SP-02.01B
• SP-02.02B – text [applied]
  C5:2026-SP-02.02B
• SP-03 Exceptions from Existing Policies and Procedures – title (before: SP-03 Ausnahmen von bestehenden Richtlinien und Verfahren) [applied]
  C5:2026-SP-03
• SP-03.01B – text [applied]
  C5:2026-SP-03.01B
• SP-03.02B – text [applied]
  C5:2026-SP-03.02B
• SP-03.03B – text [applied]
  C5:2026-SP-03.03B
• SP-03.04B – text [applied]
  C5:2026-SP-03.04B
• SP-03.05B – text [applied]
  C5:2026-SP-03.05B
• SP-03.01AC – text [applied]
  C5:2026-SP-03.01AC
• SP-03.02AC – text [applied]
  C5:2026-SP-03.02AC
• SP-03.03AC – text [applied]
  C5:2026-SP-03.03AC
• SP-03 Supplementary Information - Complementary Customer Criteria – text [applied]
  C5:2026-SP-03.SI
• HR-01 Verification of Qualification and Trustworthiness – title (before: HR-01 Ãœberprüfung der Qualifikation und Vertrauenswürdigkeit) [applied]
  C5:2026-HR-01
• HR-01.01B – text [applied]
  C5:2026-HR-01.01B
• HR-01.02B – text [applied]
  C5:2026-HR-01.02B
• HR-01.03B – text [applied]
  C5:2026-HR-01.03B
• HR-01.04B – text [applied]
  C5:2026-HR-01.04B
• HR-01.05B – text [applied]
  C5:2026-HR-01.05B
• HR-01.06B – text [applied]
  C5:2026-HR-01.06B
• HR-01.01AC – text [applied]
  C5:2026-HR-01.01AC
• HR-02 Employment Terms and Conditions – title (before: HR-02 Beschäftigungs- und Vertragsbedingungen) [applied]
  C5:2026-HR-02
• HR-02.01B – text [applied]
  C5:2026-HR-02.01B
• HR-02.02B – text [applied]
  C5:2026-HR-02.02B
• HR-02.03B – text [applied]
  C5:2026-HR-02.03B
• HR-02.04B – text [applied]
  C5:2026-HR-02.04B
• HR-02.05B – text [applied]
  C5:2026-HR-02.05B
• HR-03 Security Training and Awareness Programme – title (before: HR-03 Programm zur Sicherheitsausbildung und Sensibilisierung) [applied]
  C5:2026-HR-03
• HR-03.01B – text [applied]
  C5:2026-HR-03.01B
• HR-03.02B – text [applied]
  C5:2026-HR-03.02B
• HR-03.03B – text [applied]
  C5:2026-HR-03.03B
• HR-03.04B – text [applied]
  C5:2026-HR-03.04B
• HR-03.01AC – text [applied]
  C5:2026-HR-03.01AC
• HR-03.02AC – text [applied]
  C5:2026-HR-03.02AC
• HR-03.03AC – text [applied]
  C5:2026-HR-03.03AC
• HR-03.04AC – text [applied]
  C5:2026-HR-03.04AC
• HR-03.05AC – text [applied]
  C5:2026-HR-03.05AC
• HR-03.02AS – text [applied]
  C5:2026-HR-03.02AS
• HR-04 Disciplinary Measures – title (before: HR-04 Maßregelungsprozess) [applied]
  C5:2026-HR-04
• HR-04.01B – text [applied]
  C5:2026-HR-04.01B
• HR-04.02B – text [applied]
  C5:2026-HR-04.02B
• HR-04.03B – text [applied]
  C5:2026-HR-04.03B
• HR-04.04B – text [applied]
  C5:2026-HR-04.04B
• HR-05 Responsibilities in the Event of Termination or Change of Employment – title (before: HR-05 Verantwortlichkeiten bei Beendigung oder Änderung der Beschäftigung) [applied]
  C5:2026-HR-05
• HR-05.01B – text [applied]
  C5:2026-HR-05.01B
• HR-06 Non-disclosure Agreements – title (before: HR-06 Vertraulichkeitsvereinbarungen) [applied]
  C5:2026-HR-06
• HR-06.01B – text [applied]
  C5:2026-HR-06.01B
• HR-06.02B – text [applied]
  C5:2026-HR-06.02B
• HR-06.03B – text [applied]
  C5:2026-HR-06.03B
• HR-06.04B – text [applied]
  C5:2026-HR-06.04B
• HR-06.05B – text [applied]
  C5:2026-HR-06.05B
• HR-06.06B – text [applied]
  C5:2026-HR-06.06B
• HR-07 Remote Working - Policy – title (before: HR-07 Remote-Arbeit - Richtlinie) [applied]
  C5:2026-HR-07
• HR-07.01B – text [applied]
  C5:2026-HR-07.01B
• HR-08 Remote Working - Implementation – title (before: HR-08 Remote-Arbeit - Umsetzung) [applied]
  C5:2026-HR-08
• HR-08.01B – text [applied]
  C5:2026-HR-08.01B
• AM-01 Asset Management Framework – title (before: AM-01 Rahmenwerk für Asset Management) [applied]
  C5:2026-AM-01
• AM-01.01B – text [applied]
  C5:2026-AM-01.01B
• AM-01.01AC – text [applied]
  C5:2026-AM-01.01AC
• AM-02 Asset Inventory – title (before: AM-02 Asset-Inventar) [applied]
  C5:2026-AM-02
• AM-02.01B – text [applied]
  C5:2026-AM-02.01B
• AM-02.02B – text [applied]
  C5:2026-AM-02.02B
• AM-02.03B – text [applied]
  C5:2026-AM-02.03B
• AM-02.04B – text [applied]
  C5:2026-AM-02.04B
• AM-02.05B – text [applied]
  C5:2026-AM-02.05B
• AM-03 Hardware Asset Inventory – title (before: AM-03 Hardware-Asset-Inventar) [applied]
  C5:2026-AM-03
• AM-03.01B – text [applied]
  C5:2026-AM-03.01B
• AM-04 Software Asset Inventory – title (before: AM-04 Software-Asset-Inventar) [applied]
  C5:2026-AM-04
• AM-04.01B – text [applied]
  C5:2026-AM-04.01B
• AM-04.01AC – text [applied]
  C5:2026-AM-04.01AC
• AM-05 Policy for the Proper and Secure Use of Assets – title (before: AM-05 Richtlinie für die ordnungsgemäße und sichere Nutzung von Assets) [applied]
  C5:2026-AM-05
• AM-05.01B – text [applied]
  C5:2026-AM-05.01B
• AM-05.02B – text [applied]
  C5:2026-AM-05.02B
• AM-06 Commissioning of Hardware – title (before: AM-06 Inbetriebnahme von Hardware) [applied]
  C5:2026-AM-06
• AM-06.01B – text [applied]
  C5:2026-AM-06.01B
• AM-06.02B – text [applied]
  C5:2026-AM-06.02B
• AM-07 Decommissioning of Hardware – title (before: AM-07 Außerbetriebnahme von Hardware) [applied]
  C5:2026-AM-07
• AM-07.01B – text [applied]
  C5:2026-AM-07.01B
• AM-07.02B – text [applied]
  C5:2026-AM-07.02B
• AM-07.01AC – text [applied]
  C5:2026-AM-07.01AC
• AM-07.01AS – text [applied]
  C5:2026-AM-07.01AS
• AM-08 Commitment to Proper Use, Safe and Secure Handling and Return of Assets – title (before: AM-08 Verpflichtung zur ordnungsgemäßen Nutzung, sicheren Handhabung und Rückgabe von Assets) [applied]
  C5:2026-AM-08
• AM-08.01B – text [applied]
  C5:2026-AM-08.01B
• AM-08.02B – text [applied]
  C5:2026-AM-08.02B
• AM-08.03B – text [applied]
  C5:2026-AM-08.03B
• AM-09 Asset Classification and Labelling – title (before: AM-09 Klassifizierung und Kennzeichnung von Assets) [applied]
  C5:2026-AM-09
• AM-09.01B – text [applied]
  C5:2026-AM-09.01B
• AM-09.02B – text [applied]
  C5:2026-AM-09.02B
• AM-09.03B – text [applied]
  C5:2026-AM-09.03B
• AM-09.04B – text [applied]
  C5:2026-AM-09.04B
• AM-09.01AC – text [applied]
  C5:2026-AM-09.01AC
• AM-09.02AC – text [applied]
  C5:2026-AM-09.02AC
• AM-09.03AC – text [applied]
  C5:2026-AM-09.03AC
• AM-09.04AC – text [applied]
  C5:2026-AM-09.04AC
• AM-09 Supplementary Information - Complementary Customer Criteria – text [applied]
  C5:2026-AM-09.SI
• AM-10 Protection of Hardware on Hold – title (before: AM-10 Schutz von vorübergehend nicht genutzter Hardware) [applied]
  C5:2026-AM-10
• AM-10.01B – text [applied]
  C5:2026-AM-10.01B
• AM-10.01AS – text [applied]
  C5:2026-AM-10.01AS
• AM-11 Transfer of Hardware – title (before: AM-11 Transfer von Hardware) [applied]
  C5:2026-AM-11
• AM-11.01B – text [applied]
  C5:2026-AM-11.01B
• AM-11.02B – text [applied]
  C5:2026-AM-11.02B
• AM-11.03B – text [applied]
  C5:2026-AM-11.03B
• AM-12 Removable Media and Endpoint Devices – title (before: AM-12 Wechselmedien und Endgeräte) [applied]
  C5:2026-AM-12
• AM-12.01B – text [applied]
  C5:2026-AM-12.01B
• AM-12.01AC – text [applied]
  C5:2026-AM-12.01AC
• Physical Security (PS) – text [applied]
  C5:2026-PS
• PS-01 Physical Security and Environmental Control Requirements – title (before: PS-01 Sicherheitsanforderungen für Gebäude und Räumlichkeiten) [applied]
  C5:2026-PS-01
• PS-01.01B – text [applied]
  C5:2026-PS-01.01B
• PS-01.02B – text [applied]
  C5:2026-PS-01.02B
• PS-01.03B – text [applied]
  C5:2026-PS-01.03B
• PS-01.04B – text [applied]
  C5:2026-PS-01.04B
• PS-01.05B – text [applied]
  C5:2026-PS-01.05B
• PS-01.06B – text [applied]
  C5:2026-PS-01.06B
• PS-01.01AC – text [applied]
  C5:2026-PS-01.01AC
• PS-01.02AC – text [applied]
  C5:2026-PS-01.02AC
• PS-01.03AC – text [applied]
  C5:2026-PS-01.03AC
• PS-01.04AC – text [applied]
  C5:2026-PS-01.04AC
• PS-01.05AC – text [applied]
  C5:2026-PS-01.05AC
• PS-02 Redundancy Model – title (before: PS-02 Redundanzmodell) [applied]
  C5:2026-PS-02
• PS-02.01B – text [applied]
  C5:2026-PS-02.01B
• PS-02.02B – text [applied]
  C5:2026-PS-02.02B
• PS-02.03B – text [applied]
  C5:2026-PS-02.03B
• PS-02.01AS – text [applied]
  C5:2026-PS-02.01AS
• PS-02.02AS – text [applied]
  C5:2026-PS-02.02AS
• PS-02 Supplementary Information - Complementary Customer Criteria – text [applied]
  C5:2026-PS-02.SI
• PS-03 Perimeter Protection – title (before: PS-03 Perimeterschutz) [applied]
  C5:2026-PS-03
• PS-03.01B – text [applied]
  C5:2026-PS-03.01B
• PS-03.02B – text [applied]
  C5:2026-PS-03.02B
• PS-03.03B – text [applied]
  C5:2026-PS-03.03B
• PS-03.04B – text [applied]
  C5:2026-PS-03.04B
• PS-03.05B – text [applied]
  C5:2026-PS-03.05B
• PS-03.06B – text [applied]
  C5:2026-PS-03.06B
• PS-03.01AC – text [applied]
  C5:2026-PS-03.01AC
• PS-04 Physical Site Access Control – title (before: PS-04 Physische Zutrittskontrolle) [applied]
  C5:2026-PS-04
• PS-04.01B – text [applied]
  C5:2026-PS-04.01B
• PS-04.02B – text [applied]
  C5:2026-PS-04.02B
• … and 658 more

Sections no longer in the document (only marked, not deleted) (1)

• AM-02.01AC [applied]
  C5:2026-AM-02.01AC

Labels (1)

• Applicable: Germany [applied]

Saistītie uzdevumi

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)