Compliance
BSI C5 explained for a first security hire at a cloud provider
BSI C5 is a German cloud security criteria catalogue checked by an auditor, not BSI. Learn what the report is, who reads it and what to decide first.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
BSI C5 for DevOps leads: what a C5 report asks of your cloud
C5 is a German cloud criteria catalogue examined by an auditor who writes a report your customers read. DevOps leads should prepare evidence, version choice and shared duties.
Oct 18, 20263 min read
Compliance
BSI C5 for CTOs: what German cloud buyers expect from you
C5 is the German BSI criteria catalogue for cloud security, evidenced by an auditor's report. A CTO should choose report type, scope and timing.
Oct 18, 20264 min read
Compliance
What does Azure's shared responsibility model leave to your team?
Azure always leaves data, identities and configuration to you. Learn how duties shift across IaaS, PaaS and SaaS, and how to make it a checklist.
Oct 18, 20264 min read
Compliance
How do you set up logging and an audit trail in Azure?
Azure keeps the activity log 90 days and leaves resource logs off by default. Route both with diagnostic settings to storage you control and extend it.
Oct 18, 20264 min read
Compliance
Which Azure encryption model should you use for your data?
Azure encrypts data at rest by default with service-managed keys. Use customer-managed keys in Key Vault when you need the control, and plan for the duty.
Oct 18, 20264 min read
Compliance
What drives the cost of AWS security logging, and how do you budget for it?
AWS logging cost follows event volume and copies delivered. Count event types, choose what to log, set retention, and estimate from a sample, not a guess.
Oct 18, 20265 min read
Compliance
What security baseline should a new AWS account have on day one?
Lock the root user, use federated temporary credentials and MFA, turn on a multi-Region CloudTrail trail, and set guardrails before any workload lands.
Oct 18, 20264 min read
Compliance
What does an AWS IAM least privilege checklist look like?
A working AWS IAM least privilege checklist: temporary credentials, scoped policies, Access Analyzer, unused access cleanup and account guardrails.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.