Skip to main content

Crypto / Secrets

Controls

Version:
IDTitleObjectiveControl FamilyThreat MappingsGuideline MappingsAssessment Requirements
CCC.SecMgmt.CN01Enforce Scheduled Secret RotationEnsure that secrets are rotated on a defined schedule to reduce the risk of secret compromise and unauthorized access.Access Control122
CCC.SecMgmt.CN03Enforce Least-Privilege Access to Secret ValuesEnsure that only the identities that consume a secret can read its value, and that an identity which only consumes a secret cannot replace its value.Access Control323
CCC.SecMgmt.CN04Protect Secret Versions from Premature LossEnsure that a secret version cannot be destroyed before dependent systems have moved off it, and that disabling or scheduling the destruction of a version is observed.Data Resilience232

Imports

IDRemarks
CCC.Core.CN01Encrypt Data for Transmission
CCC.Core.CN02Encrypt Data for Storage
CCC.Core.CN03Implement Multi-factor Authentication (MFA) for Access
CCC.Core.CN04Log All Access and Changes
CCC.Core.CN05Prevent Access from Untrusted Entities
CCC.Core.CN06Restrict Deployments to Trust Perimeter
CCC.Core.CN07Alert on Unusual Enumeration Activity
CCC.Core.CN08Replicate Data to Multiple Locations
CCC.Core.CN09Ensure Integrity of Access Logs
CCC.Core.CN10Restrict Data Replication to Trust Perimeter
CCC.Core.CN11Protect Encryption Keys
CCC.Core.CN16Alert on Changes to Protective Configuration