Hardening & monitoring
From architecture reviews to 24/7 cloud security monitoring — with Wiz as our CNAPP partner.
Cloud Security: secure, sovereign, verifiable
CNAPP and CSPM with Wiz, BSI C5 attestations and cloud sovereignty per BSI C3A: how to secure multi-cloud environments, prioritize misconfigurations by actual risk and demonstrate compliance to your customers.
Cloud security rarely fails for lack of tools — it fails for lack of context: which of the thousands of findings are actually exploitable? Which obligations fall on you under the Shared-Responsibility model? And how sovereign is your cloud, really? These knowledge pages combine technical hardening (CNAPP, CSPM, continuous monitoring) with the German and European compliance anchors C5, C3A and the upcoming EU cloud regulation.
Topics & knowledge pages
Each topic leads to a dedicated knowledge page with deep dives, practical guides and the matching services.
Compliance & sovereignty
C5 attestation, sovereignty assessment per BSI C3A and the EU Cloud & AI Development Act.
Deep Dives
In-depth knowledge pages on the topics that currently raise the most questions — with verified sources and concrete measures.
CSA CCM & CAIQ
The Cloud Security Alliance's Cloud Controls Matrix structures cloud security into 17 domains with 207 controls — the CAIQ translates them into a standardized question catalog for provider assessment.
View knowledge pageDigital Sovereignty
Who decides whether, where, and under which law your systems run? In 2026, digital sovereignty is no longer an abstract debate but a measurable, auditable category.
View knowledge pageBSI C5
What the BSI's Cloud Computing Compliance Criteria Catalogue covers, how Type 1 and Type 2 attestations work – and which obligations rest with the cloud customer itself.
View knowledge pageBSI C3A
What the new BSI catalogue "Criteria enabling Cloud Computing Autonomy" covers, how the sovereignty criteria SOV-1 to SOV-6 are structured, and how to apply them in provider selection and procurement.
View knowledge pageCNAPP & CSPM
How CSPM, CWPP, CIEM, KSPM and DSPM are converging into Cloud-Native Application Protection Platforms – and why context determines effectiveness.
View knowledge pageCloud Security Fundamentals
How to secure responsibilities, identities and configurations in the cloud in a structured way – from the shared responsibility model to an organization-wide baseline.
View knowledge pageWhitepapers for download
Each whitepaper has its own page with details and a direct download form.
Whitepaper coming soon
Latest news on this topic area
All newsHow secure is your cloud, really?
In an initial consultation, we build a joint picture of your cloud environment — and show you how to prioritize risks and demonstrate compliance.