C5:2020 is a BSI auditing standard that establishes a mandatory minimum basis for cloud security and the adoption of public cloud solutions by German government agencies and organisations working with the government. IT-Grundschutz provides the specific methodology to help organisations identify and implement security measures for IT systems, and is one of the elements that provides the basis of the C5:2020 standard.