OPS-17 Logging and Monitoring - Availability of the Monitoring Software
Changed since C5:2020
Basic criterion
No change.
Additional criterion
Added requirement regarding measures for protecting the confidentiality, integrity and availability of logs and the associated infrastructure.
Wording in C5:2020
Basic criterion
The Cloud Service Provider monitors the system components for logging and monitoring in its area of responsibility. Failures are automatically and promptly reported to the Cloud Service Provider’s responsible departments so that these can assess the failures and take required action.
Additional criterion
The system components for logging and monitoring are designed in such a way that the overall functionality is not restricted if individual components fail.
Basic criterion
The cloud service provider monitors the availability of the system components for logging and monitoring in its area of responsibility.
Failures are automatically and timely reported to the cloud service provider's responsible departments so that these can assess the failures and take required action.
Additional criterion
OPS-17.01AC
Additional, complementingThe cloud service provider provides resilience for the logs and the associated infrastructure by defining, documenting and implementing measures to protect their integrity, availability and confidentiality.
OPS-17.02AC
Additional, complementingThe system components for logging and monitoring are designed in such a way that the overall functionality is not restricted if individual components fail.
Supplementary information
Individual components that might restrict the overall functionality are single points of failure. Such restrictions can be avoided by identifying potential single points of failure and adressing them through redundancy or the design and implementation of a resilient architecture.
BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources