# SSO – Control and Monitoring of Service Providers and Suppliers

- Web page: https://c5.patrickscheid.de/en/sso/

- [SSO-01 Policies and Procedures for Controlling and Monitoring Service Organisations](https://c5.patrickscheid.de/en/sso-01/index.html.md): 3 sub-criteria (1 basic, 2 additional), changed since C5:2020
- [SSO-02 Risk Assessment of Service Organisations](https://c5.patrickscheid.de/en/sso-02/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020
- [SSO-03 Data Processing of Service Organisations](https://c5.patrickscheid.de/en/sso-03/index.html.md): 3 sub-criteria (2 basic, 1 additional), new in C5:2026
- [SSO-04 Directory of Service Organisations](https://c5.patrickscheid.de/en/sso-04/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 (formerly SSO-03)
- [SSO-05 Monitoring of Compliance with Requirements](https://c5.patrickscheid.de/en/sso-05/index.html.md): 10 sub-criteria (7 basic, 3 additional), with customer criteria, changed since C5:2020 (formerly SSO-04)
- [SSO-06 Contract Termination Strategy for Service Organisations](https://c5.patrickscheid.de/en/sso-06/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 (formerly SSO-05)
- [SSO-07 Ensuring Transparency within Service Organisations](https://c5.patrickscheid.de/en/sso-07/index.html.md): 3 sub-criteria (2 basic, 1 additional), new in C5:2026
- [SSO-08 Controlling Exchanges with Suppliers of Functional Components](https://c5.patrickscheid.de/en/sso-08/index.html.md): 3 sub-criteria (3 basic), new in C5:2026

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.