Myra demonstriert KRITIS Kompetenz

Secure in the Cloud: Myra Security Achieves BSI C5 Attestation

30. November 2022

Security technology manufacturer and Security-as-a-Service provider Myra Security demonstrates security in the cloud. In partnership with the Cologne-based auditing company HKKG, usd AG auditors verified in an audit according to IDW PH 9.860.3 that Myra Security meets the security requirements of BSI C5 for secure cloud computing

Proven security thanks to audit expertise and comprehensive test catalog

The "Cloud Computing Compliance Controls Catalogue", or C5 for short, published by the German Federal Office for Information Security (BSI) defines a baseline for the security of cloud services and is aimed at professional cloud service providers, their auditors and customers. In addition to technical aspects, cybersecurity, compliance and data protection, topics such as personnel requirements, physical security or procurement and development are also examined as part of a C5 audit. The requirements reference recognized security standards such as ISO/IEC 27001 or the Cloud Controls Matrix of the Cloud Security Alliance. The C5 is now an established standard in the market for proving security for cloud service providers.

More security for highly sensitive customer data

As a specialist service provider that protects highly sensitive digital infrastructures on behalf of its customers, Myra invests extensively in the demonstrable protection of information and IT assets. Especially in sensitive and highly regulated sectors such as finance, government, healthcare and critical infrastructure (CRITIS), strong IT security confirmed by independent auditors is crucial.

"As a German manufacturer of IT security solutions for the protection of banks, insurance companies, governments and large enterprises, we bear a great social responsibility. Independent auditors like usd AG therefore audit Myra on a regular basis," says Tobias Lang, company spokesman at Myra Security. "With our C5 testing, we can offer our customers assurance that all processes and systems are secured in the best possible way and according to the state of the art to ensure the integrity, confidentiality and availability of their data."

Raphael Heinlein accompanied the project as lead auditor of usd AG: "We have been supporting Myra Security for years as a security partner in various areas of IT security, such as PCI DSS, KRITIS and cloud security. It becomes clear time and again that the security of customer data enjoys an extremely high priority at Myra. We are pleased about the successful C5 audit and would like to thank everyone involved at Myra and HKKG for the constructive and pleasant cooperation."

Also interesting:

DORA Deep Dive: Threat-Led Penetration Testing (TLPT)

DORA Deep Dive: Threat-Led Penetration Testing (TLPT)

Since the publication of the original blog post in May 2024, the final version of the RTS for TLPT has been released. The blog post has been updated accordingly and now covers the current requirements. The Digital Operational Resilience Act (DORA) came into force on...

Red Teaming: 5 Questions Every IT Leader Wants Answered

Red Teaming: 5 Questions Every IT Leader Wants Answered

Many companies invest in firewalls, endpoint protection, and awareness training, assuming that this puts them in a strong position. But the reality is different: attackers do not think in terms of tools, but in terms of targets. They combine technical vulnerabilities...

Categories

Categories