{"id":47055,"date":"2026-04-27T10:00:00","date_gmt":"2026-04-27T08:00:00","guid":{"rendered":"https:\/\/www.cloudmagazin.com\/?p=47055"},"modified":"2026-06-17T19:36:10","modified_gmt":"2026-06-17T17:36:10","slug":"bsi-cloud-sovereignty-six-dimensions","status":"publish","type":"post","link":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/","title":{"rendered":"C3A: How the BSI Makes Cloud Sovereignty Measurable"},"content":{"rendered":"<p style=\"color:#6190a9;font-size:0.9em;margin:0 0 16px;padding:0;\">6 min. read<\/p>\n<p style=\"line-height:1.8;margin-bottom:20px;\"><strong>On 27 April 2026, the BSI published the C3A &#8211; a criteria catalogue that makes cloud sovereignty measurable for the first time. The framework breaks sovereignty down into six auditable dimensions, from legal access rights to supply chain exposure. For IT procurement teams, it is the first catalogue that translates sovereignty into concrete purchasing requirements. And it is already available, while the EU is still drafting the Cloud and AI Development Act.<\/strong><\/p>\n<h2>Key Takeaways<\/h2>\n<ul>\n<li><strong>Sovereignty becomes measurable:<\/strong> The BSI&#8217;s C3A evaluates cloud services across six sovereignty dimensions. Gut feeling is replaced by an auditable framework.<\/li>\n<li><strong>C3A builds on C5:<\/strong> Where C5 certifies technical security, C3A assesses autonomy. A provider must meet C5 criteria before C3A even applies.<\/li>\n<li><strong>Voluntary and ready to use now:<\/strong> C3A is a voluntary procurement tool with no regulatory binding force &#8211; IT teams can start using it immediately. The EU Cloud and AI Development Act, which aims to make sovereignty a legal requirement, is still working its way through the legislative process.<\/li>\n<\/ul>\n<p style=\"font-size:0.88em;color:#666;margin:20px 0 32px 0;border-top:1px solid #e5e5e5;border-bottom:1px solid #e5e5e5;padding:10px 0;\"><span style=\"color:#004a59;font-weight:700;text-transform:uppercase;font-size:0.72em;letter-spacing:0.14em;margin-right:14px;\">Related:<\/span><a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/05\/28\/cloud-sovereignty-c5-data-residency\/\" style=\"color:#333;text-decoration:underline;\">Cloud Sovereignty in Practice: C5, Data Residency, Key Control<\/a>&nbsp;&nbsp;<span style=\"color:#ccc;\">\/<\/span>&nbsp;&nbsp;<a href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/13\/reshoring-over-offshore-how-german-smes-are-rewiring-their\/\" style=\"color:#333;text-decoration:underline;\">C5 Audits Force Mid-Market Companies to Rethink Their Cloud Supply Chain<\/a><\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">How C3A Differs from C5 and CADA<\/h2>\n<p>Three acronyms are currently circling the same topic &#8211; but they mean very different things. Anyone procuring cloud services should keep them clearly apart.<\/p>\n<p><strong>What is C3A?<\/strong> The C3A (Criteria enabling Cloud Computing Autonomy) is a BSI criteria catalogue that makes the sovereignty characteristics of a cloud service transparent and comparable. Providers demonstrate compliance through audits; users assess their usage scenarios against the criteria and define a target sovereignty level for their workloads.<\/p>\n<p>The division of labour is clear. C5 answers whether a cloud service is operated securely from a technical standpoint. C3A builds on that foundation and assesses whether the service can be used autonomously within a given risk context. The EU Cloud and AI Development Act, in turn, is the legal framework intended to make sovereignty a procurement obligation &#8211; but it is still moving through the legislative process. C3A delivers the measurement tool that will operationalise that obligation once it passes, and is available today.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">The Six Dimensions of Cloud Sovereignty<\/h2>\n<p>The C3A follows the European Cloud Sovereignty Framework and converts its factors into auditable criteria. The result is six dimensions that together form a sovereignty profile. The BSI deliberately excludes two areas of the EU framework: security and compliance sovereignty is already covered by C5, while ecological sustainability falls outside the BSI&#8217;s mandate.<\/p>\n<div style=\"overflow-x:auto;-webkit-overflow-scrolling:touch;margin:16px 0 32px 0;\">\n<table data-element=\"comparison_table\" style=\"width:100%;min-width:560px;border-collapse:collapse;font-size:0.95em;\">\n<thead>\n<tr style=\"background:#004a59;color:#fff;\">\n<th style=\"padding:12px 16px;text-align:left;border:1px solid #004a59;color:#fff;\">Dimension<\/th>\n<th style=\"padding:12px 16px;text-align:left;border:1px solid #004a59;color:#fff;\">What it targets<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Strategic Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Independence of your own cloud strategy from individual vendors and their roadmaps.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Data Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Control over where your data is stored, who can access it, and how it is encrypted.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Legal Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Protection against foreign government access through jurisdiction and contract law.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Operational Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">The ability to maintain operations without relying on the vendor.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\"><strong>Supply Chain Sovereignty<\/strong><\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Transparency and control over the technical sub-suppliers behind a service.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:12px 16px;border:1px solid #ddd;color:#004a59;font-weight:600;\">Technological Sovereignty<\/td>\n<td style=\"padding:12px 16px;border:1px solid #ddd;\">Availability of open standards and the ability to replace individual components.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p style=\"font-size:0.8em;color:#888;margin-top:8px;\">Source: BSI C3A, structured according to the EU Cloud Sovereignty Framework; classification by cloudmagazin<\/p>\n<p>The elegance of this breakdown lies in what it does to the conversation: it turns a catch-all question into six specific ones. Nobody has to answer whether a cloud is sovereign in the abstract. Instead, a target level can be defined and verified for each dimension individually.<\/p>\n<h2 style=\"margin-top:64px;margin-bottom:20px;padding-top:16px;\">How C3A Changes Cloud Procurement<\/h2>\n<p>For IT purchasing, this shifts the basis of the conversation. Until now, sovereignty was a word that appeared in every tender and could be measured in none. With C3A, organisations can define a target sovereignty level for each workload and hold it up against a vendor&#8217;s actual profile.<\/p>\n<p>Three steps make sense regardless of the framework&#8217;s legal status. First, classify your workloads: not every application needs the highest sovereignty level &#8211; an internal test environment calls for a different standard than a specialist process handling personal data. Second, request the vendor&#8217;s profile: providers that take C3A seriously can document their rating for each dimension. Third, assess the gap: wherever target and actual levels diverge, you either have room to negotiate or a reason to plan an exit.<\/p>\n<p>The fact that C3A is voluntary weakens it less than it sounds. Precisely because there is no mandate behind it, the framework can be folded into the next procurement process immediately, without any political scaffolding. And when the EU legal framework does arrive, this tool will already have real-world experience behind it.<\/p>\n<h2 style=\"padding-top:64px;margin-bottom:20px;\">Frequently Asked Questions<\/h2>\n<details>\n<summary><strong>What is the difference between C3A and C5?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">C5 certifies whether a cloud service is operated in a technically secure manner. C3A builds on this and assesses whether it can be used autonomously &#8211; that is, sovereignly &#8211; within a given risk context. C3A requires that the provider meets the C5 criteria.<\/p>\n<\/details>\n<details>\n<summary><strong>Which six dimensions does the C3A examine?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Strategic, data, legal, operational, supply chain, and technological sovereignty. The BSI deliberately excluded the security and sustainability domains of the EU framework, since C5 already covers security and sustainability falls outside the scope of the mandate.<\/p>\n<\/details>\n<details>\n<summary><strong>Is the use of C3A mandatory?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">No. The C3A is a voluntary assessment tool with no direct regulatory effect. It can, however, serve as a foundation if the EU Cloud and AI Development Act later makes sovereignty a procurement requirement.<\/p>\n<\/details>\n<details>\n<summary><strong>How does IT procurement use the C3A in practice?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Users define a target sovereignty level for each workload and compare it against a provider&#8217;s profile. Providers document their rating for each dimension through an audit. Where target and actual levels diverge, that gap becomes the basis for negotiation &#8211; or for considering an exit.<\/p>\n<\/details>\n<details>\n<summary><strong>When will the C3A be available?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">The BSI published the C3A on 27 April 2026, initially as an English-language document. A German version was announced for the second quarter of 2026.<\/p>\n<\/details>\n<p style=\"margin:32px 0 12px 0;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.18em;color:#666;\">More from the MBF Media Network<\/p>\n<div style=\"padding:14px 18px;border-left:3px solid #d65663;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#d65663;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">digital-chiefs<\/div>\n<p><a href=\"https:\/\/www.digital-chiefs.de\/cloud-ai-development-act-souveraenitaet-vergabekriterium\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Cloud and AI Development Act: Sovereignty Becomes a Procurement Requirement<\/a><\/p>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #202528;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#202528;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">mybusinessfuture<\/div>\n<p><a href=\"https:\/\/mybusinessfuture.com\/govtech-piloten-verstetigung-marktplaetze-praequalifizierung\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Why GovTech Pilots Fail Before Reaching Full Operations<\/a><\/p>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #69d8ed;background:#fafafa;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#69d8ed;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">securitytoday<\/div>\n<p><a href=\"https:\/\/www.securitytoday.de\/2026\/03\/11\/cloud-security-exportartikel-c5-sovereign-cloud-gaia-x-reboot-2026\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Cloud Security as a German Export: C5, Sovereign Cloud, and the European Advantage<\/a><\/p>\n<\/div>\n<p style=\"text-align:right;color:#868e96;font-size:0.85em;margin-top:48px;\"><em>Cover image source: Pexels \/ Sergei Starostin (px:6466141)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"Cloud sovereignty becomes measurable: The BSI breaks it down into six verifiable dimensions with C3A.","protected":false},"author":98,"featured_media":46957,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"pre_headline":"","bildquelle":"","teasertext":"","language":"de","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[900,930],"tags":[],"industry":[],"class_list":["post-47055","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-reboot-germany"],"evm_reading_time_minutes":6,"wpml_language":"en","wpml_translation_of":46956,"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>C3A: How the BSI Makes Cloud Sovereignty Measurable<\/title>\n<meta name=\"description\" content=\"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"C3A: How the BSI Makes Cloud Sovereignty Measurable\" \/>\n<meta property=\"og:description\" content=\"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/\" \/>\n<meta property=\"og:site_name\" content=\"cloudmagazin\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudmagazincom\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-27T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-17T17:36:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tobias Massow\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:site\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tobias Massow\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/\"},\"author\":{\"name\":\"Tobias Massow\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/1da9f418651805af4d71cf16565a5232\"},\"headline\":\"C3A: How the BSI Makes Cloud Sovereignty Measurable\",\"datePublished\":\"2026-04-27T08:00:00+00:00\",\"dateModified\":\"2026-06-17T17:36:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/\"},\"wordCount\":1054,\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg\",\"articleSection\":[\"Reboot Germany\",\"Reboot Germany\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/\",\"name\":\"C3A: How the BSI Makes Cloud Sovereignty Measurable\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg\",\"datePublished\":\"2026-04-27T08:00:00+00:00\",\"dateModified\":\"2026-06-17T17:36:10+00:00\",\"description\":\"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg\",\"width\":1024,\"height\":576,\"caption\":\"Cloud-Computing-Infrastruktur: BSI entwickelt Messgr\u00f6\u00dfen f\u00fcr Cloud-Souver\u00e4nit\u00e4t. (Foto: S. Starostin \\\/ Pexels)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/2026\\\/04\\\/27\\\/bsi-cloud-sovereignty-six-dimensions\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"C3A: How the BSI Makes Cloud Sovereignty Measurable\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"name\":\"cloudmagazin\",\"description\":\"Inspiration f\u00fcr Businessentscheider\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#organization\",\"name\":\"cloudmagazin\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/cloudmagazin-logo-klein_menu.jpg\",\"width\":150,\"height\":150,\"caption\":\"cloudmagazin\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/cloudmagazincom\\\/\",\"https:\\\/\\\/x.com\\\/cloudmagazin\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/cloudmagazin\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/#\\\/schema\\\/person\\\/1da9f418651805af4d71cf16565a5232\",\"name\":\"Tobias Massow\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/tobi-m-2-cut.png\",\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/tobi-m-2-cut.png\",\"contentUrl\":\"https:\\\/\\\/www.cloudmagazin.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/tobi-m-2-cut.png\",\"caption\":\"Tobias Massow\"},\"description\":\"Tobias Massow is the Managing Director of Evernine Media GmbH and Editor-in-Chief of Cloudmagazin. He oversees the strategic direction of the magazine and the entire MBF Media network, comprising four B2B trade magazines for IT decision-makers in the DACH region.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/tobias-massow\\\/\"],\"url\":\"https:\\\/\\\/www.cloudmagazin.com\\\/en\\\/author\\\/tobias\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"C3A: How the BSI Makes Cloud Sovereignty Measurable","description":"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/","og_locale":"en_US","og_type":"article","og_title":"C3A: How the BSI Makes Cloud Sovereignty Measurable","og_description":"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.","og_url":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/","og_site_name":"cloudmagazin","article_publisher":"https:\/\/www.facebook.com\/cloudmagazincom\/","article_published_time":"2026-04-27T08:00:00+00:00","article_modified_time":"2026-06-17T17:36:10+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg","type":"image\/jpeg"}],"author":"Tobias Massow","twitter_card":"summary_large_image","twitter_creator":"@cloudmagazin","twitter_site":"@cloudmagazin","twitter_misc":{"Written by":"Tobias Massow","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#article","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/"},"author":{"name":"Tobias Massow","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/1da9f418651805af4d71cf16565a5232"},"headline":"C3A: How the BSI Makes Cloud Sovereignty Measurable","datePublished":"2026-04-27T08:00:00+00:00","dateModified":"2026-06-17T17:36:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/"},"wordCount":1054,"publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg","articleSection":["Reboot Germany","Reboot Germany"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/","url":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/","name":"C3A: How the BSI Makes Cloud Sovereignty Measurable","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg","datePublished":"2026-04-27T08:00:00+00:00","dateModified":"2026-06-17T17:36:10+00:00","description":"Measuring cloud sovereignty: BSI breaks it down into 6 testable dimensions with C3A. Discover its impact on IT procurement.","breadcrumb":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#primaryimage","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/06\/c3a-bsi-cloud-souveraenitaet-sechs-dimensionen-cover-hero.jpg","width":1024,"height":576,"caption":"Cloud-Computing-Infrastruktur: BSI entwickelt Messgr\u00f6\u00dfen f\u00fcr Cloud-Souver\u00e4nit\u00e4t. (Foto: S. Starostin \/ Pexels)"},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/27\/bsi-cloud-sovereignty-six-dimensions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudmagazin.com\/en\/home\/"},{"@type":"ListItem","position":2,"name":"C3A: How the BSI Makes Cloud Sovereignty Measurable"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudmagazin.com\/en\/#website","url":"https:\/\/www.cloudmagazin.com\/en\/","name":"cloudmagazin","description":"Inspiration f\u00fcr Businessentscheider","publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudmagazin.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudmagazin.com\/en\/#organization","name":"cloudmagazin","url":"https:\/\/www.cloudmagazin.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","width":150,"height":150,"caption":"cloudmagazin"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cloudmagazincom\/","https:\/\/x.com\/cloudmagazin","https:\/\/www.linkedin.com\/showcase\/cloudmagazin\/"]},{"@type":"Person","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/1da9f418651805af4d71cf16565a5232","name":"Tobias Massow","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/tobi-m-2-cut.png","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/tobi-m-2-cut.png","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/tobi-m-2-cut.png","caption":"Tobias Massow"},"description":"Tobias Massow is the Managing Director of Evernine Media GmbH and Editor-in-Chief of Cloudmagazin. He oversees the strategic direction of the magazine and the entire MBF Media network, comprising four B2B trade magazines for IT decision-makers in the DACH region.","sameAs":["https:\/\/www.linkedin.com\/in\/tobias-massow\/"],"url":"https:\/\/www.cloudmagazin.com\/en\/author\/tobias\/"}]}},"_links":{"self":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/47055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/users\/98"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/comments?post=47055"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/47055\/revisions"}],"predecessor-version":[{"id":47056,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/47055\/revisions\/47056"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media\/46957"}],"wp:attachment":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media?parent=47055"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/categories?post=47055"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/tags?post=47055"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/industry?post=47055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}