Skip to main content

CCC.Core.C05: Prevent Access from Untrusted Entities

Control ID:CCC.Core.C05
Title:Prevent Access from Untrusted Entities
Objective:Ensure that secure access controls enforce the principle of least privilege to restrict access to authorized entities from explicitly trusted sources only.
Control Family:
Identity and Access Management

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH01Access Control is MisconfiguredMisconfigured access controls may grant excessive privileges or fail to restrict unauthorized access to the service and its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.F06Access ControlThe service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
NIST-CSF
PR.AC-3
0
-
CCM
DS-5
0
-
ISO_27001
2013 A.13.1.3
0
-
NIST_800_53
AC-3
0
-

Assessment Requirements

IDDescriptionApplicability
CCC.Core.C05.TR01When an attempt is made to modify data on the service or a child resource, the service MUST block requests from unauthorized entities.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.C05.TR02When administrative access or configuration change is attempted on the service or a child resource, the service MUST refuse requests from unauthorized entities.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.C05.TR03When administrative access or configuration change is attempted on the service or a child resource in a multi-tenant environment, the service MUST refuse requests across tenant boundaries unless the origin is explicitly included in a pre-approved allowlist.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.Core.C05.TR04When data is requested from outside the trust perimeter, the service MUST refuse requests from unauthorized entities.
tlp-amber
tlp-red
CCC.Core.C05.TR05When any request is made from outside the trust perimeter, the service MUST NOT provide any response that may indicate the service exists.
tlp-red
CCC.Core.C05.TR06When any request is made to the service or a child resource, the service MUST refuse requests from unauthorized entities.
tlp-green
tlp-amber
tlp-red