| ID | Title | Objective | Control Family | Threat Mappings | Guideline Mappings | Assessment Requirements |
|---|---|---|---|---|---|---|
| CCC.SecMgmt.CN01 | Enforce Scheduled Secret Rotation | Ensure that secrets are rotated on a defined schedule to reduce the risk of secret compromise and unauthorized access. | Access | 1 | 2 | 2 |
| CCC.SecMgmt.CN03 | Enforce Least-Privilege Access to Secret Values | Ensure that only the identities that consume a secret can read its value, and that an identity which only consumes a secret cannot replace its value. | Access | 3 | 2 | 3 |
| CCC.SecMgmt.CN04 | Protect Secret Versions from Premature Loss | Ensure that a secret version cannot be destroyed before dependent systems have moved off it, and that disabling or scheduling the destruction of a version is observed. | Data | 2 | 3 | 2 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.CN01 | Encrypt Data for Transmission |
| CCC.Core.CN02 | Encrypt Data for Storage |
| CCC.Core.CN03 | Implement Multi-factor Authentication (MFA) for Access |
| CCC.Core.CN04 | Log All Access and Changes |
| CCC.Core.CN05 | Prevent Access from Untrusted Entities |
| CCC.Core.CN06 | Restrict Deployments to Trust Perimeter |
| CCC.Core.CN07 | Alert on Unusual Enumeration Activity |
| CCC.Core.CN08 | Replicate Data to Multiple Locations |
| CCC.Core.CN09 | Ensure Integrity of Access Logs |
| CCC.Core.CN10 | Restrict Data Replication to Trust Perimeter |
| CCC.Core.CN11 | Protect Encryption Keys |
| CCC.Core.CN16 | Alert on Changes to Protective Configuration |