# SIM – Security Incident Management

- Web page: https://c5.patrickscheid.de/en/sim/

- [SIM-01 Policy for Security Incident Management](https://c5.patrickscheid.de/en/sim-01/index.html.md): 4 sub-criteria (4 basic), with customer criteria, changed since C5:2020
- [SIM-02 Security Incident Response Plans](https://c5.patrickscheid.de/en/sim-02/index.html.md): 2 sub-criteria (2 basic), new in C5:2026
- [SIM-03 Processing of Security Incidents](https://c5.patrickscheid.de/en/sim-03/index.html.md): 10 sub-criteria (7 basic, 3 additional), changed since C5:2020 (formerly SIM-02)
- [SIM-04 Documentation and Reporting of Security Incidents](https://c5.patrickscheid.de/en/sim-04/index.html.md): 4 sub-criteria (2 basic, 2 additional), with customer criteria, changed since C5:2020 (formerly SIM-03)
- [SIM-05 Duty of the Personnel to Report Security Incidents to a Central Body](https://c5.patrickscheid.de/en/sim-05/index.html.md): 3 sub-criteria (3 basic), with customer criteria, changed since C5:2020 (formerly SIM-04)
- [SIM-06 Evaluation and Learning Process](https://c5.patrickscheid.de/en/sim-06/index.html.md): 4 sub-criteria (4 basic), with customer criteria, changed since C5:2020 (formerly SIM-05)

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.