In its guideline, DSB reiterates which obligations the processor has to meet (in particular the obligations in Chapter IV of the GDPR).
The guideline is available (in German) at the following link: https://www.dsb.gv.at/documents/22758/116802/GDPR-Leitfaden-2018.pdf