Scribd Logo
Upload

Welcome to Scribd!

  • 13 views

    Cloud Computing Compliance Controls Catalogue (C5) : - Table of Content

    Uploaded by

    SNFK2018
    This document outlines the table of contents for the Cloud Computing Compliance Controls Catalogue (C5). Section 1 provides an introduction and discusses uniform requirements based on existing standards. Section 2 describes the structure and content presentation of the control areas in C5. Section 3 covers proving conformity with requirements through an independent audit, including auditing standards, the audit scope and system description, audit objectives and reporting, and additional requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Cloud Computing Compliance Controls Catalogue (C5) : - Table of Content

    Uploaded by

    SNFK2018
    13 views1 page
    This document outlines the table of contents for the Cloud Computing Compliance Controls Catalogue (C5). Section 1 provides an introduction and discusses uniform requirements based on existing standards. Section 2 describes the structure and content presentation of the control areas in C5. Section 3 covers proving conformity with requirements through an independent audit, including auditing standards, the audit scope and system description, audit objectives and reporting, and additional requirements.

    Original Title

    C5341

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document outlines the table of contents for the Cloud Computing Compliance Controls Catalogue (C5). Section 1 provides an introduction and discusses uniform requirements based on existing standards. Section 2 describes the structure and content presentation of the control areas in C5. Section 3 covers proving conformity with requirements through an independent audit, including auditing standards, the audit scope and system description, audit objectives and reporting, and additional requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    13 views1 page

    Cloud Computing Compliance Controls Catalogue (C5) : - Table of Content

    Uploaded by

    SNFK2018
    This document outlines the table of contents for the Cloud Computing Compliance Controls Catalogue (C5). Section 1 provides an introduction and discusses uniform requirements based on existing standards. Section 2 describes the structure and content presentation of the control areas in C5. Section 3 covers proving conformity with requirements through an independent audit, including auditing standards, the audit scope and system description, audit objectives and reporting, and additional requirements.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 1

    Cloud Computing ComplianCe Controls Catalogue (C5) | taBle oF Content

    1.1 Current s

    1.2 Uniform requirements based on existing standards 10

    2 Structure and contents of C5 13

    2.1 Structure of C5 13

    2.2 Content-related presentation of the controls areas 14

    2.3 Underlying national and international standards 16

    3 Proving conformity with the requirements by an independent audit 18

    3.1 Introduction 18

    3.2 Auditing standards and criteria 18

    3.2.1 ISAE 3000 (Revised) as auditing standard 18


    3.2.2 Correspondingly applying further auditing standards 19
    3.2.3 Criteria 20

    3.3 Subject of the audit including system description 20

    3.3.1 Subject of the audit 20


    3.3.2 System description of the cloud provider 21
    3.3.3 Use of evidence from other audits 22

    3.4 Audit objective and reporting 23

    3.4.1 Audit objective 23


    3.4.2 Reporting of the auditor 23

    3.5 Separate and supplementary requirements of the BSI 23

    3.5.1 Qualification of the auditor 23


    3.5.2 Reporting on existing and/or identified exceptions to
    the requirements 24
    3.5.3 Information on the limitation of liability 24
    3.5.4 Updates of C5 25

    3.6 Application notes for potential cloud customers: Regular


    audits and contractual assurance 25

    You might also like