CGM Receives C5 Attestation According to BSI Criteria

CompuGroup Medical SE & Co. KGaA (CGM) has achieved C5 attestation (Type 1) for cloud services in Germany. This certification, based on the criteria from the German Federal Office for Information Security (BSI), was retroactively validated as of May 31, 2024, by an independent auditing firm.

The C5 attestation is mandated by the German Digital Act (DigiG) for cloud services in the healthcare and social sectors from July 1, 2024. Developed by BSI, the Cloud Computing Compliance Criteria Catalogue (C5) encompasses over 120 security requirements, including information security organization, physical security, and interoperability. These are regularly reviewed by independent auditors.

Michael Rauch, CEO of CompuGroup Medical, stated, "The C5-attested cloud applications in Germany are another milestone in our commitment to high security standards in healthcare data processing.”

The C5 attestation assists customers in choosing a secure cloud provider and supports healthcare professionals in complying with stringent information security standards. It ensures transparency regarding the security status of cloud services.