The Draft
The BSI is working on a new draft of the C5 catalogue and has asked the community to comment on it here C5:2025 – the future of C5 as a community draft.
5¢ for C5 as a form
My 5¢ comment is in this form
What’s missing?
My main additions, besides many details:
-
Anyone who wants to offer digitally sovereign services needs digitally sovereign data centres. However, it is not enough for them to be located in Germany; the operators and service providers must also not be subject to foreign jurisdiction.
I used to always demand that ‘the keys and algorithms’ must be under the control of the customers. This was considered too technical, which is why we now have this legal definition.
-
Drones now fly over critical infrastructure. Data centres are not usually secured from above. Diesel generators and tanks are located on the roofs. Unfortunately, this means that protection against drones will be mandatory in the future.
Translated with DeepL.com (free version)