BSI C5 compact: Standard, practical experience, control systems & differences to ISO 27001 – clarity for cloud compliance

In our presentation, we provide a compact, practical overview of the BSI Cloud Computing Compliance Criteria Catalogue (C5). We explain the structure and content of the standard and show how C5 differs from other common security standards such as ISO/IEC 27001 – especially with regard to control systems and traceability.

A special focus is placed on our practical experience: What are the challenges involved in implementation? What typical pitfalls do we see with cloud providers and service providers? And what does it mean in concrete terms to set up a functioning control system in accordance with C5 requiremen ...