diff --git a/Standards/scs-0124-v1-security-of-iaas-service-software.md b/Standards/scs-0124-v1-security-of-iaas-service-software.md index 94b1200dd..d2f90bac8 100644 --- a/Standards/scs-0124-v1-security-of-iaas-service-software.md +++ b/Standards/scs-0124-v1-security-of-iaas-service-software.md @@ -110,7 +110,7 @@ From the moment a vulnerability is disclosed these are the advised reaction time 3. Mid (CVSS = 4.0 – 6.9): 1 month 4. Low (CVSS = 0.1 – 3.9): 3 months -[^1]: [C5 criteria catalog with timeframes for responses on page 70.](https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/CloudComputing/ComplianceControlsCatalogue/2020/C5_2020.pdf?__blob=publicationFile&v=3) +[^1]: [Cloud Computing Compliance Criteria Catalogue – C5:2020 with time frames for responses on page 70.](https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/CloudComputing/ComplianceControlsCatalogue/2020/C5_2020.pdf?__blob=publicationFile&v=3#page=72) This standard will follow this guidance and refer to these timeframes as "reasonable timeframes".