Skip to main content

Devtools / Build

Controls

Version:
IDTitleObjectiveControl FamilyThreat MappingsGuideline MappingsAssessment Requirements
CCC.Build.CN01Restrict Allowed Build AgentsEnsure that builds are executed only on authorized build agents to maintain control over the build environment and prevent unauthorized code execution.Orchestration131
CCC.Build.CN02Restrict Allowed External Services for Build TriggersEnsure that builds can only be triggered by authorized external services or repositories to prevent unauthorized code execution or tampering.Orchestration131
CCC.Build.CN03Deny External Network Access for Build EnvironmentsEnsure that build environments do not have external network access to prevent unauthorized external access and data exfiltration.Networking231

Imports

IDRemarks
CCC.Core.CN01Prevent unencrypted requests
CCC.Core.CN02Ensure data encryption at rest for all stored data
CCC.Core.CN04Log all access and changes
CCC.Core.CN05Prevent access from untrusted entities
CCC.Core.CN09Prevent tampering, deletion, or unauthorized access to access logs
CCC.Core.CN10Prevent data replication to destinations outside of defined trust perimeter