# SP – Security Policies and Procedures

- Web page: https://c5.patrickscheid.de/en/sp/

- [SP-01 Documentation, Communication and Provision of Policies and Procedures](https://c5.patrickscheid.de/en/sp-01/index.html.md): 4 sub-criteria (4 basic), changed since C5:2020
- [SP-02 Review and Approval of Policies and Procedures](https://c5.patrickscheid.de/en/sp-02/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020
- [SP-03 Exceptions from Existing Policies and Procedures](https://c5.patrickscheid.de/en/sp-03/index.html.md): 8 sub-criteria (5 basic, 3 additional), with customer criteria, changed since C5:2020

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.