Description

Federal Office for Information Security published Cloud Computing Compliance Criteria Catalogue (C5):2026

On 7 April 2026, the German Federal Office for Information Security (BSI) published the Cloud Computing Compliance Criteria Catalogue (C5):2026, a non-binding criteria catalogue setting out security requirements for cloud computing services. The C5:…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
software provider: other software, infrastructure provider: cloud computing, storage and databases
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2026-04-07
adopted

On 7 April 2026, the German Federal Office for Information Security (BSI) published the Cloud Compu…