Germany C5
Also known as: C5, C5:2020, C5:2026, Cloud Computing Compliance Controls Catalogue, BSI C5
Cloud Computing Compliance Criteria Catalogue (C5) — Federal Office for Information Security (BSI)
The criteria catalogue German cloud providers are audited against, and the de facto entry ticket to the German public sector. C5:2020 is the edition most attestations still cite; BSI published C5:2026 in spring 2026 and recommends it for test periods ending on or after 1 June 2027.
Timeline
No changes recorded yet — we are watching, and nothing has been published.
Monitoring
Watched by 1 official source. Watching since 18 September 2026.