# DEV-15 Exceptions to the Change Management Process

- Domain: DEV – Procurement, Development and Modification of Information Systems
- Since C5:2020: new in C5:2026
- Web page: https://c5.patrickscheid.de/en/dev-15/

## Basic criterion

### DEV-15.01B

The cloud service provider's change management process implements procedures for managing exceptions, including emergency changes, to ensure related risks are appropriately mitigated.

**Supplementary information:**

This criteria refers mainly to the exception process demanded in SP-03, although all exceptions from the standard procedure for changes are meant here.

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.