Skip to main content

CCC.Core.CN04: Log All Access and Changes

Control ID:CCC.Core.CN04
Title:Log All Access and Changes
Objective:Ensure that all access attempts are logged to maintain a detailed audit trail for security and compliance purposes.
Control Family:
Logging & Monitoring

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH01Access is Granted to Unauthorized UsersLogic designed to give different permissions to different entities may be misconfigured or manipulated, allowing unauthorized entities to access restricted parts of the service, its data, or its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.CP06Access ControlThe service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
CCM
LOG-08
5
Log Records (Generate audit records containing relevant security information)

Assessment Requirements

IDDescriptionApplicability
CCC.Core.CN04.AR01When administrative access or configuration change is attempted on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.CN04.AR02When any attempt is made to modify data on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-amber
tlp-red
CCC.Core.CN04.AR03When any attempt is made to read data on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-red