Bit Ninja

Cloud hosting service company Alibaba Cloud has completed its assessment for the Cloud Computing Compliance Controls Catalogue (C5) set out by the Federal Office for Information Security in Germany, also known as Bundesamt für Sicherheit in der Informationstechnik (BSI).

C5 is intended primarily for professional cloud service providers, their auditors and customers of the cloud service providers. It has 17 distinct control requirements that the cloud providers either have to comply with or meet defined minimum standards. It is a required assessment for working with the public sector in Germany and is being increasingly adopted by the private sector.

Alibaba Cloud is one of the world’s first cloud providers to achieve this attestation with cloud specific requirements. The attestation covers Elastic Compute Service (“ECS”), Relational Database Service (“RDS”), Object Storage Service (“OSS”), Content Delivery Network (“CDN”), Server Load Balancer (“SLB”), Virtual Private Cloud (“VPC”) and Alibaba Cloud Security available on Alibaba Cloud’s regions in Singapore and Germany.

“Alibaba Cloud is fully committed to the highest standards in all aspects of our operations no matter where that might be in the world,” said Simon Hu, Senior Vice President of Alibaba Group and President of Alibaba Cloud. “We are proud to be the first company to meet the C5 additional requirements – something that should increase the trust placed in us by our growing client base not only in Germany, but also across the whole of Europe.”

Expanding Presence in Germany

The philosophy behind C5 is to unify the currently fragmented certification of cloud provisions that are measured against no agreed standards and possess no coherent oversight.

“Information security is a critical success factor for the digitization,” said Arne Schönbohm, president of Bundesamt für Sicherheit in der Informationstechnik (BSI). “The C5 standard is a well-established and valuable decision guidance in the cloud market for all companies that want to use cloud services in the course of their digitization.”

In addition to obtaining the C5, Alibaba Cloud is also a member of the Trusted Cloud organization, a program run by the German Federal Ministry for Economic Affairs and Energy (BMWi). This would be a further seal of quality that signifies trusted cloud services and underlines the commitment of Alibaba Cloud to growing its presence in Germany and ensuring that it always operates at market leading standards.