Domains

COS

Communication Security

8 criteria, 20 basic and 4 additional sub-criteria

• COS-01Technical Safeguards4 sub-criteria: 3 basic, 1 additional, with customer criteria
• COS-02Security Requirements for Connections in the Cloud Service Provider's Network1 sub-criterion
• COS-03Monitoring of Connections in the Cloud Service Provider's Network5 sub-criteria, with customer criteria
• COS-04Cross-Network Access3 sub-criteria: 2 basic, 1 additional, with customer criteria
• COS-05Networks for Administration3 sub-criteria: 2 basic, 1 additional
• COS-06Separation of Data Traffic in Jointly Used Network Environments2 sub-criteria: 1 basic, 1 additional, with customer criteria
• COS-07Documentation of the Network Topology4 sub-criteria
• COS-08Policies for Data Transmission2 sub-criteria, with customer criteria

BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources