C5 (Germany)
C5: Portability and Interoperability

C5 (Germany) C5-PI-01: Documentation and safety of input and output interfaces

Offer documented inbound and outbound interfaces that let customer systems and other services retrieve data over standardised protocols preserving confidentiality and integrity, with documentation detailed enough for customer specialists and kept aligned to the productive release.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 20 controls across 12 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • CCM-IPY-01 Interoperability and Portability Policy and Procedures
  • CCM-IPY-02 Application Interface Availability
  • CCM-IPY-03 Secure Interoperability and Portability Management

NIST SP 800-161 Rev 1 · 3 controls

FedRAMP High · 2 controls

  • CA-3 Information Exchange
  • SA-5 System Documentation

FedRAMP Moderate · 2 controls

  • CA-3 Information Exchange
  • SA-5 System Documentation

NIST SP 800-53 Rev 5 · 2 controls

SOC 2 · 2 controls

  • SOC2-PI1.1 PI1.1 Quality information about processing objectives, data definitions and specifications
  • SOC2-PI1.4 PI1.4 Controls over output delivery
  • ASD37-27 Outbound data loss prevention (Very Good)

ISO 27001:2022 · 1 control

  • 8.26 Application security requirements

ISO 27002:2022 · 1 control

  • 8.26 Application security requirements

ISO 27701:2019 · 1 control

  • 8.3.1 Obligations to PII principals
  • NIST-CSF-ID.AM-03 Representations of the organization's authorized network communication and internal and external network data flows are maintained

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in C5: Portability and Interoperability

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-PI-01 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

Query this from an agent

The graph holds this control, the 20 it maps to, and the evidence behind each claim, over MCP and REST.