Storage / Object / Controls / v2026.11
Apply a Default Retention Policy to All Objects
CCC.ObjStor.CN04 · Data Resilience
Ensure that all objects stored in the object storage system have a retention policy applied by default, preventing premature deletion or modification of objects.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.Core.CP11 | Backup | The service can generate copies of its data or configurations in the form of automated backups, snapshot-based backups, or incremental backups. |
| CCC.Core.CP18 | Resource Versioning | The service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations. |
| CCC.Core.CP32 | Deletion Protection | The service may be configured to block the deletion of a child resource, or to retain a deleted child resource for a recovery window during which it can be restored. |
| CCC.Core.CP34 | Data Lifecycle Policy | The service may be configured to automatically delete, archive, or transition data or child resources once a user-defined age or condition is reached. |
| CCC.ObjStor.CP06 | Replace Stored Objects | The service always allows a user to replace an object in a bucket by writing a new object to the same key, overwriting the previous content unless versioning retains it. |
| CCC.ObjStor.CP07 | Delete Stored Objects | The service always allows a user to delete an object from a bucket given the object key. |
| CCC.ObjStor.CP17 | Object Immutability | The service may be configured to lock an object or a bucket so that its objects cannot be overwritten or deleted until a retention period expires, and the lock itself may be made irrevocable. |
Related Threats
| ID | Title | Description |
|---|
| CCC.Core.TH06 | Data is Lost or Corrupted | Services that rely on accurate data are susceptible to disruption in the event of data loss or corruption. Any actions that lead to the unintended deletion, alteration, or limited access to data can impact the availability of the service and the system it is part of. |
| CCC.ObjStor.TH08 | Object Immutability is Bypassed or Expires Prematurely | An immutability lock may be applied in a mode that privileged identities can shorten or remove, with a retention period shorter than the record requires, or not applied to objects that require it. Objects intended to be write-once can then be overwritten or deleted. This results in a loss of integrity and availability of records that depend on the lock. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.ObjStor.CN04.AR01 | When an object is uploaded to the object storage system, the object MUST automatically receive a default retention policy that prevents premature deletion or modification. | tlp-clear, tlp-green, tlp-amber, tlp-red |
| CCC.ObjStor.CN04.AR02 | When an attempt is made to delete or modify an object that is subject to an active retention policy, the service MUST prevent the action from being completed. | tlp-clear, tlp-green, tlp-amber, tlp-red |
Guideline Mappings
| Framework | ID | Remarks |
|---|
| CCM | DSP-16 | Data Retention and Deletion |
| CCM | DSP-17 | Sensitive Data Protection |