Skip to main content

CCC.Core.C04: Log All Access and Changes

Control ID:CCC.Core.C04
Title:Log All Access and Changes
Objective:Ensure that all access attempts are logged to maintain a detailed audit trail for security and compliance purposes.
Control Family:
Logging & Monitoring

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH01Access Control is MisconfiguredMisconfigured access controls may grant excessive privileges or fail to restrict unauthorized access to the service and its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.F06Access ControlThe service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
NIST-CSF
DE.AE-3
0
-
CCM
LOG-08
0
-
NIST_800_53
AU-2
0
-
NIST_800_53
AU-3
0
-
NIST_800_53
AU-12
0
-

Assessment Requirements

IDDescriptionApplicability
CCC.Core.C04.TR01When administrative access or configuration change is attempted on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.C04.TR02When any attempt is made to modify data on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-amber
tlp-red
CCC.Core.C04.TR03When any attempt is made to read data on the service or a child resource, the service MUST log the client identity, time, and result of the attempt.
tlp-red