Domains

SIM

Security Incident Management

6 criteria, 22 basic and 5 additional sub-criteria

• SIM-01Policy for Security Incident Management4 sub-criteria, with customer criteria
• SIM-02Security Incident Response Plans2 sub-criteria, new in C5:2026
• SIM-03Processing of Security Incidents10 sub-criteria: 7 basic, 3 additional
• SIM-04Documentation and Reporting of Security Incidents4 sub-criteria: 2 basic, 2 additional, with customer criteria
• SIM-05Duty of the Personnel to Report Security Incidents to a Central Body3 sub-criteria, with customer criteria
• SIM-06Evaluation and Learning Process4 sub-criteria, with customer criteria

BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources