Sensitive data (e.g., PII, secrets, authentication tokens) is ingested into logs without proper anonymization, masking, or redaction at source or during ingestion. The sensitive values are stored in the log store and exposed to every user and sink with read access to those logs, compromising the confidentiality of the data.
Sensitive Data is Logged Without Masking
CCC.Logging.TH04
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Logging.CP06 | Log Filtering and Transformation | The service may be configured to filter, normalise, and transform raw log data at ingestion to reduce storage volume and improve usability. |
| CCC.Logging.CP14 | Sensitive Data Masking | The service may be configured to detect sensitive data such as personal information, credentials, or tokens in log entries at ingestion and mask or redact it before storage. Not every provider offers this natively (GCP Cloud Logging has no ingestion-time masking). |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.Logging.CN04 | Restrict Field And Log Type Access | Configure access to logs to follow the principle of least privilege in particular where technically possible limit the log fields users have access to to prevent accidental exposure to sensitive information such as PII. |