Management / Monitoring / Controls / v2026.11
Restrict Access to Dashboards and Health Status
CCC.Monitor.CN04 · Access Control
Ensure that dashboards, uptime results, and service level objective status are visible only to authorized users.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.Monitor.CP05 | Service Level Objective Monitoring | The service may be configured to evaluate user-defined service level objectives against service level indicators derived from collected metrics, and to report the remaining error budget. |
| CCC.Monitor.CP07 | Uptime Monitoring | The service may be configured to probe an endpoint from external provider-operated locations on a schedule and record whether it is reachable and responding. |
| CCC.Monitor.CP09 | Dashboards | The service can present metrics, alerts, service level objectives, and uptime results in user-defined visual dashboards that may be shared with other users. |
Related Threats
| ID | Title | Description |
|---|
| CCC.Monitor.TH02 | System Health is Exposed to Unauthorized Viewers | Dashboards, uptime results, and service level objective status may be shared beyond the intended audience through overly broad sharing settings or public links. Degraded or failing components are then visible to unauthorized viewers, who can target systems that are already in a weakened state or time activity to coincide with existing incidents. This impacts the confidentiality of operational information and the availability of the affected systems. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.Monitor.CN04.AR01 | When a dashboard, uptime result, or service level objective is shared, the service MUST require the viewer to be an authenticated user who is authorized on that resource. | tlp-clear, tlp-green, tlp-amber, tlp-red |