Germany C5

Also known as: C5, C5:2020, C5:2026, Cloud Computing Compliance Controls Catalogue, BSI C5

Cloud Computing Compliance Criteria Catalogue (C5) — Federal Office for Information Security (BSI)

The criteria catalogue German cloud providers are audited against, and the de facto entry ticket to the German public sector. C5:2020 is the edition most attestations still cite; BSI published C5:2026 in spring 2026 and recommends it for test periods ending on or after 1 June 2027.

Subscribe to Germany C5 (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 18 September 2026.