



You don't need new software: we build the control system in your existing tools. The auditor's fee for Type 1 and Type 2 is billed directly by the audit firm.
Less than 4 months from kick-off to the Type 1 assessment. The Type 2 attestation follows after the observation period in which the controls demonstrably operate. We name the date before we start.
One contact person on your side for coordination and approvals, usually a few hours per week. We build the documentation, workflows and evidence.
The attestation is issued by an independent audit firm. We recommend auditors with C5 experience, coordinate the date and support Type 1 and Type 2.
An ISO 27001-compliant ISMS as the foundation, plus 168 criteria in 17 areas and 6 general conditions: cloud hardening, tenant separation, transparency information and customer controls, evidenced to the auditor in Type 1 and Type 2. What the catalogue requires in detail is on our C5 page.