# SIM-06 Evaluation and Learning Process

- Domain: SIM – Security Incident Management
- Since C5:2020: changed (formerly SIM-05)
- Web page: https://c5.patrickscheid.de/en/sim-06/

## Basic criterion

### SIM-06.01B

Mechanisms are in place to measure and monitor the type and scope of security incidents and to report them to supporting bodies.

**Supplementary information:**

Supporting bodies may be external service providers or government agencies such as the BSI.

### SIM-06.02B

The cloud service provider defines, implements and maintains a knowledge repository containing:

- Security incidents;
- Measures taken for the solution of these security incidents; and
- Information about the assets affected by these security incidents.

This information is used to supplement the classification catalogue of incidents (cf. SIM-03).

### SIM-06.03B

The information obtained from the security incident monitoring and the intelligence gathered in the knowledge repository is used to identify recurring security events or security incidents, or potential significant security incidents, to determine the need for advanced safeguards, and for implementing them.

### SIM-06.04B

The evaluation and learning process includes the results of root-cause analyses conducted in accordance with SIM-03.

## Complementary customer criteria

Cloud service customers ensure with suitable controls that they include into their ISMS the findings and measures related to previous security incidents reported by the cloud service provider. The cloud service customers evaluate whether and which supporting measures they might take on their side.

## Changes since C5:2020

From BSI's C5:2026 changelog.

**Basic criterion:**

Added requirement regarding the implementation of a knowledge repository. Further require the identification of security events or incidents to also consider the intelligence from the knowledge repository.

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.