Developing a General Concept for C5 Compliance: Adapting and Applying the Concept to a Company's Application

Software Industry is increasing its reliance on Cloud Architecture and this has led to a majorshift in the industry. Along with the benefits it brings there is also an immediate necessity toincrease security measures of these Cloud environments to protect sensitive data andensure regulatory and Compliance requirements are satisfied. This thesis explores the C5Certification Criteria developed by the Bundesamt für Sicherheit in der Informationstechnik(BSI) for Cloud Environments and Applications and aims to create a General Concept andpathway to achieving C5 Compliance for an Application aiming to bridge the Gap betweentheoretical and practical implementation by implementing the General concept to anApplication at the company OEV Online Dienste GmbH. A detailed evaluation of the C5criteria and its core principles will be examined and a pathway to achieving C5 will beexplored. The C5 certification not only allows organizations to ensure security andcompliance but also gives them a competitive edge.