Domains

PSS

Product Safety and Security

12 criteria, 39 basic and 13 additional sub-criteria

• PSS-01Guidelines and Recommendations for Cloud Service Customers5 sub-criteria: 4 basic, 1 additional, with customer criteria
• PSS-02Identification of Vulnerabilities of the Cloud Service4 sub-criteria: 3 basic, 1 additional
• PSS-03Informing Customers about Known Vulnerabilities7 sub-criteria: 5 basic, 2 additional, with customer criteria
• PSS-04Error handling and Logging Mechanisms7 sub-criteria: 6 basic, 1 additional, with customer criteria
• PSS-05Authentication Mechanisms3 sub-criteria: 2 basic, 1 additional, with customer criteria
• PSS-06Session Management2 sub-criteria, with customer criteria
• PSS-07Confidentiality of Authentication Information3 sub-criteria, with customer criteria
• PSS-08Roles and Rights Framework4 sub-criteria, with customer criteria
• PSS-09Authorisation Mechanisms4 sub-criteria: 3 basic, 1 additional, with customer criteria
• PSS-10Software Defined Networking2 sub-criteria, with customer criteria
• PSS-11Images for Virtual Machines and Containers3 sub-criteria: 1 basic, 2 additional, with customer criteria
• PSS-12Region of Data Processing and Storage8 sub-criteria: 4 basic, 4 additional, with customer criteria

BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources