Below, the BSI publishes two documents to assist auditors and customers

• The summary of reportings - basic elements of the C5 audit report. This is intended to provide guidance for the examiner and may be included in each report as a summary summary at the beginning or as an annex at the end.
  
• The evaluation guide provides a structure that supports the customer in systematically evaluating a C5 report. This includes including the security measures of the cloud provider (and the related audit results), setting up its own user controls for use, and thus being able to assess and manage the risk associated with cloud usage.