BSI™ publishes new minimum standard for external cloud services

External cloud services are already common practice in German companies. However, there is often an uneasy feeling about whether the chosen solution is really secure. To provide better guidance, the Federal Office for Information Security (BSI™) has now published a new minimum standard in accordance with Paragraph 8, BSI™ Act (BISG) for the use of external cloud services.

To provide a comprehensive overview of the security measures, the standard not only includes the upstream data categorization and risk analysis, but also encompasses the entire lifecycle of cloud usage. Starting from procurement through deployment to the termination phase. Specific security requirements are defined for each phase. The linkage with the basic requirements of the already published Cloud Computing Requirements Catalog (C5) of the BSI™ is another key aspect.

The minimum standard for the use of external cloud services is available on the BSI™ website.

Source: Press release from the BSI™