BSI C5 · the 2026 version

When C5:2026 starts to matter

121 → 168
criteria
17
subject areas, unchanged
7 April 2026
Published

C5:2026 is out. C5:2020 still counts.

Until 1 June 2027
Your choice

Audit against either version. New builds should take 2026.

From 1 June 2027
C5:2026 only

Any audit date or period starting from here uses the new catalogue.

Source: BSI, Cloud Computing Compliance Criteria Catalogue (C5:2026)