# OIS – Organisation of Information Security

- Web page: https://c5.patrickscheid.de/en/ois/

- [OIS-01 Information Security Management System (ISMS)](https://c5.patrickscheid.de/en/ois-01/index.html.md): 5 sub-criteria (3 basic, 2 additional), changed since C5:2020
- [OIS-02 Information Security Policy](https://c5.patrickscheid.de/en/ois-02/index.html.md): 3 sub-criteria (3 basic), changed since C5:2020
- [OIS-03 Interfaces and Dependencies](https://c5.patrickscheid.de/en/ois-03/index.html.md): 5 sub-criteria (5 basic), with customer criteria, changed since C5:2020
- [OIS-04 Segregation of Duties](https://c5.patrickscheid.de/en/ois-04/index.html.md): 6 sub-criteria (4 basic, 2 additional), changed since C5:2020
- [OIS-05 Threat Intelligence](https://c5.patrickscheid.de/en/ois-05/index.html.md): 3 sub-criteria (3 basic), new in C5:2026
- [OIS-06 Contact with Relevant Government Agencies and Interest Groups](https://c5.patrickscheid.de/en/ois-06/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly OIS-05)
- [OIS-07 Risk Management Policy](https://c5.patrickscheid.de/en/ois-07/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly OIS-06)
- [OIS-08 Application of the Risk Management Policy - Risk Assessment](https://c5.patrickscheid.de/en/ois-08/index.html.md): 9 sub-criteria (6 basic, 3 additional), changed since C5:2020 (formerly OIS-07)
- [OIS-09 Application of the Risk Management Policy - Risk Treatment](https://c5.patrickscheid.de/en/ois-09/index.html.md): 7 sub-criteria (7 basic), new in C5:2026
- [OIS-10 Information Security in Project Management](https://c5.patrickscheid.de/en/ois-10/index.html.md): 1 sub-criterion, new in C5:2026

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.