CCC.Logging.C04: Restrict Field And Log Type Access
Control ID:CCC.Logging.C04
Title:Restrict Field And Log Type Access
Objective:Configure access to logs to follow the principle of least privilege in particular where technically
possible limit the log fields users have access to to prevent accidental exposure to sensitive
information such as PII.
Control Family:
Identity and Access Management
Related Threats
| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.Logging.TH04 | Inadequate Log Anonymization/Masking | Sensitive data (e.g., PII, secrets, authentication tokens) is ingested into logs without proper anonymization, masking, or redaction at source or during ingestion. This creates a significant data exposure risk, particularly for data not intended for broad log access. | 1 | 1 | 0 |