# OPS – Operations - Web page: https://c5.patrickscheid.de/en/ops/ - [OPS-01 Capacity Management - Planning](https://c5.patrickscheid.de/en/ops-01/index.html.md): 4 sub-criteria (3 basic, 1 additional), with customer criteria, unchanged since C5:2020 - [OPS-02 Capacity Management - Monitoring](https://c5.patrickscheid.de/en/ops-02/index.html.md): 3 sub-criteria (2 basic, 1 additional), with customer criteria, changed since C5:2020 - [OPS-03 Capacity Management - Controlling of Resources](https://c5.patrickscheid.de/en/ops-03/index.html.md): 2 sub-criteria (2 basic), with customer criteria, changed since C5:2020 - [OPS-04 Protection Against Malware - Policies and Procedures](https://c5.patrickscheid.de/en/ops-04/index.html.md): 1 sub-criterion, changed since C5:2020 - [OPS-05 Protection Against Malware - Implementation](https://c5.patrickscheid.de/en/ops-05/index.html.md): 7 sub-criteria (3 basic, 4 additional), with customer criteria, changed since C5:2020 - [OPS-06 Data Backup and Recovery - Policies and Procedures](https://c5.patrickscheid.de/en/ops-06/index.html.md): 2 sub-criteria (1 basic, 1 additional), with customer criteria, changed since C5:2020 - [OPS-07 Data Backup and Recovery - Monitoring](https://c5.patrickscheid.de/en/ops-07/index.html.md): 3 sub-criteria (2 basic, 1 additional), with customer criteria, changed since C5:2020 - [OPS-08 Data Backup and Recovery - Regular Testing](https://c5.patrickscheid.de/en/ops-08/index.html.md): 7 sub-criteria (5 basic, 2 additional), with customer criteria, changed since C5:2020 - [OPS-09 Data Backup and Recovery - Storage](https://c5.patrickscheid.de/en/ops-09/index.html.md): 5 sub-criteria (5 basic), changed since C5:2020 - [OPS-10 Logging and Monitoring - Policies and Procedures](https://c5.patrickscheid.de/en/ops-10/index.html.md): 1 sub-criterion, with customer criteria, changed since C5:2020 - [OPS-11 Logging and Monitoring - Policies and Procedures for Handling Cloud Service Derived Data and Account Data](https://c5.patrickscheid.de/en/ops-11/index.html.md): 4 sub-criteria (2 basic, 2 additional), with customer criteria, changed since C5:2020 - [OPS-12 Logging and Monitoring - Access, Retention and Deletion](https://c5.patrickscheid.de/en/ops-12/index.html.md): 1 sub-criterion, changed since C5:2020 - [OPS-13 Logging and Monitoring - Security Information and Event Management](https://c5.patrickscheid.de/en/ops-13/index.html.md): 5 sub-criteria (2 basic, 3 additional), changed since C5:2020 - [OPS-14 Logging and Monitoring - Retention of the Logging Data](https://c5.patrickscheid.de/en/ops-14/index.html.md): 3 sub-criteria (3 basic), with customer criteria, changed since C5:2020 - [OPS-15 Logging and Monitoring - Accountability](https://c5.patrickscheid.de/en/ops-15/index.html.md): 5 sub-criteria (3 basic, 2 additional), with customer criteria, changed since C5:2020 - [OPS-16 Logging and Monitoring - Configuration](https://c5.patrickscheid.de/en/ops-16/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 - [OPS-17 Logging and Monitoring - Availability of the Monitoring Software](https://c5.patrickscheid.de/en/ops-17/index.html.md): 4 sub-criteria (2 basic, 2 additional), changed since C5:2020 - [OPS-18 Managing Vulnerabilities - Policies and Procedures](https://c5.patrickscheid.de/en/ops-18/index.html.md): 5 sub-criteria (5 basic), with customer criteria, changed since C5:2020 - [OPS-19 Managing Incidents and Crashes - Policies and Procedures](https://c5.patrickscheid.de/en/ops-19/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-20 Managing Incidents - Implementation](https://c5.patrickscheid.de/en/ops-20/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-21 Managing Crashes - Implementation](https://c5.patrickscheid.de/en/ops-21/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-22 Managing Vulnerabilities, Incidents and Crashes - Penetration Tests](https://c5.patrickscheid.de/en/ops-22/index.html.md): 16 sub-criteria (8 basic, 8 additional), changed since C5:2020 (formerly OPS-19) - [OPS-23 Managing Vulnerabilities, Incidents and Crashes - Measurements, Analyses and Assessments of Procedures](https://c5.patrickscheid.de/en/ops-23/index.html.md): 2 sub-criteria (2 basic), unchanged since C5:2020 (formerly OPS-20) - [OPS-24 Involvement of Cloud Service Customers in the Event of Incidents](https://c5.patrickscheid.de/en/ops-24/index.html.md): 3 sub-criteria (2 basic, 1 additional), with customer criteria, changed since C5:2020 (formerly OPS-21) - [OPS-25 Managing Vulnerabilities, Incidents and Crashes - Vulnerability Scans](https://c5.patrickscheid.de/en/ops-25/index.html.md): 7 sub-criteria (4 basic, 3 additional), with customer criteria, changed since C5:2020 (formerly OPS-22) - [OPS-26 Managing Vulnerabilities, Incidents and Crashes - System Hardening](https://c5.patrickscheid.de/en/ops-26/index.html.md): 7 sub-criteria (6 basic, 1 additional), with customer criteria, changed since C5:2020 (formerly OPS-23) - [OPS-27 Managing Vulnerabilities - Patch Management Policies and Procedures](https://c5.patrickscheid.de/en/ops-27/index.html.md): 5 sub-criteria (4 basic, 1 additional), new in C5:2026 - [OPS-28 Managing Vulnerabilities - Patch Management Implementation](https://c5.patrickscheid.de/en/ops-28/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-29 Managing Vulnerabilities, Incidents and Crashes - Externally Sourced Components](https://c5.patrickscheid.de/en/ops-29/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-30 Separation of Datasets - Policies and Procedures](https://c5.patrickscheid.de/en/ops-30/index.html.md): 1 sub-criterion, new in C5:2026 - [OPS-31 Separation of Datasets - Implementation](https://c5.patrickscheid.de/en/ops-31/index.html.md): 3 sub-criteria (3 basic), with customer criteria, changed since C5:2020 (formerly OPS-24) - [OPS-32 Confidential Computing - Policies and Procedures](https://c5.patrickscheid.de/en/ops-32/index.html.md): 4 sub-criteria (3 basic, 1 additional), new in C5:2026 - [OPS-33 Confidential Computing - Remote Attestation](https://c5.patrickscheid.de/en/ops-33/index.html.md): 5 sub-criteria (3 basic, 2 additional), new in C5:2026 - [OPS-34 Container Management - Policies and Procedures](https://c5.patrickscheid.de/en/ops-34/index.html.md): 3 sub-criteria (2 basic, 1 additional), new in C5:2026 - [OPS-35 Container Management - Implementation](https://c5.patrickscheid.de/en/ops-35/index.html.md): 1 sub-criterion, new in C5:2026 --- Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.