# OPS-17 Logging and Monitoring - Availability of the Monitoring Software

- Domain: OPS – Operations
- Since C5:2020: changed
- Web page: https://c5.patrickscheid.de/en/ops-17/

## Basic criterion

### OPS-17.01B

The cloud service provider monitors the availability of the system components for logging and monitoring in its area of responsibility.

### OPS-17.02B

Failures are automatically and timely reported to the cloud service provider's responsible departments so that these can assess the failures and take required action.

## Additional criterion

### OPS-17.01AC (additional, complementing)

The cloud service provider provides resilience for the logs and the associated infrastructure by defining, documenting and implementing measures to protect their integrity, availability and confidentiality.

### OPS-17.02AC (additional, complementing)

The system components for logging and monitoring are designed in such a way that the overall functionality is not restricted if individual components fail.

**Supplementary information:**

Individual components that might restrict the overall functionality are single points of failure. Such restrictions can be avoided by identifying potential single points of failure and adressing them through redundancy or the design and implementation of a resilient architecture.

## Changes since C5:2020

From BSI's C5:2026 changelog.

**Basic criterion:**

No change.

**Additional criterion:**

Added requirement regarding measures for protecting the confidentiality, integrity and availability of logs and the associated infrastructure.

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.