| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.DataWar.TH01 | Unauthorized Public Access to Datasets | Datasets may be unintentionally made publicly accessible, either at the dataset level or via IAM policies, allowing unauthorized users to read or modify sensitive data, leading to data breaches and compliance violations. | 1 | 1 | 0 |
| CCC.DataWar.TH02 | Data Exfiltration via Unauthorized Views | Attackers may create or exploit unauthorized views to access sensitive data without proper permissions, leading to data leakage. | 1 | 1 | 0 |
| CCC.DataWar.TH03 | Exposure of Sensitive Data through Inadequate Column-Level Security | Lack of proper column-level security can lead to unauthorized users accessing sensitive data fields, resulting in data breaches. | 1 | 1 | 0 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.TH01 | Access is Granted to Unauthorized Users |
| CCC.Core.TH02 | Data is Intercepted in Transit |
| CCC.Core.TH03 | Deployment Region Network is Untrusted |
| CCC.Core.TH04 | Data is Replicated to Untrusted or External Locations |
| CCC.Core.TH05 | Interference with Replication Processes |
| CCC.Core.TH06 | Data is Lost or Corrupted |
| CCC.Core.TH07 | Logs are Tampered With or Deleted |
| CCC.Core.TH08 | Runtime Metrics are Manipulated |
| CCC.Core.TH09 | Runtime Logs are Read by Unauthorized Entities |
| CCC.Core.TH10 | State-change Events are Read by Unauthorized Entities |
| CCC.Core.TH11 | Publications are Incorrectly Triggered |
| CCC.Core.TH12 | Resource Constraints are Exhausted |
| CCC.Core.TH13 | Resource Tags are Manipulated |
| CCC.Core.TH14 | Older Resource Versions are Used |
| CCC.Core.TH15 | Automated Enumeration and Reconnaissance by Non-human Entities |