Skip to main content

Core / Ccc

Controls

Version:
IDTitleObjective
CCC.Core.CN01Encrypt Data for TransmissionEnsure that all communications are encrypted in transit to protect data integrity and confidentiality.
CCC.Core.CN13Minimize Lifetime of Encryption and Authentication CertificatesEnsure that encryption and authentication certificates have a limited lifetime to reduce the risk of compromise and ensure the use of up-to-date security practices.
CCC.Core.CN06Restrict Deployments to Trust PerimeterEnsure that the service and its child resources are only deployed on infrastructure in locations that are explicitly included within a defined trust perimeter.
CCC.Core.CN08Replicate Data to Multiple LocationsEnsure that data is replicated across multiple physical locations to protect against data loss due to hardware failures, natural disasters, or other catastrophic events.
CCC.Core.CN09Ensure Integrity of Access LogsEnsure that access logs are always recorded to an external location that cannot be manipulated from the context of the service(s) it contains logs for.
CCC.Core.CN10Restrict Data Replication to Trust PerimeterEnsure that data is only replicated on infrastructure in locations that are explicitly included within a defined trust perimeter.
CCC.Core.CN02Encrypt Data for StorageEnsure that all data stored is encrypted at rest using strong encryption algorithms.
CCC.Core.CN11Protect Encryption KeysEnsure that encryption keys are managed securely by enforcing the use of approved algorithms, regular key rotation, and customer-managed encryption keys (CMEKs).
CCC.Core.CN14Maintain Recent BackupsEnsure that all backups used for disaster recovery are recent and subject to a retention policy that limits deletion.
CCC.Core.CN03Implement Multi-factor Authentication (MFA) for AccessEnsure that all sensitive activities require two or more identity factors during authentication to prevent unauthorized access.
CCC.Core.CN05Prevent Access from Untrusted EntitiesEnsure that secure access controls enforce the principle of least privilege to restrict access to authorized entities from explicitly trusted sources only.
CCC.Core.CN04Log All Access and ChangesEnsure that all access attempts are logged to maintain a detailed audit trail for security and compliance purposes.
CCC.Core.CN07Alert on Unusual Enumeration ActivityEnsure that logs and associated alerts are generated when unusual enumeration activity is detected that may indicate reconnaissance activities.