Multi-Factor Authentication Is Required for Object Deletion

CCC.ObjStor.CN07: Multi-Factor Authentication Is Required for Object Deletion

Control ID:CCC.ObjStor.CN07

Title:Multi-Factor Authentication Is Required for Object Deletion

Objective:Ensure that deletion of objects stored in the object storage system is protected by multi-factor authentication (MFA), reducing the risk of accidental, unauthorized, or compromised-credential–based data destruction.

Control Family:

Data

Related Threats

ID	Title	Description	External Mappings	Capability Mappings	Control Mappings
CCC.Core.TH01	Access is Granted to Unauthorized Users	Logic designed to give different permissions to different entities may be misconfigured or manipulated, allowing unauthorized entities to access restricted parts of the service, its data, or its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data.	1	1	0
CCC.Core.TH06	Data is Lost or Corrupted	Services that rely on accurate data are susceptible to disruption in the event of data loss or corruption. Any actions that lead to the unintended deletion, alteration, or limited access to data can impact the availability of the service and the system it is part of.	1	1	0

Related Capabilities

ID	Title	Description
CCC.Core.CP06	Access Control	The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.
CCC.Core.CP29	Active Ingestion	While running, the service can receive inputs, commands, or data streams from external sources such as dedicated APIs, exposed network ports, message queues, and persistent data ingestion channels.

Guideline Mappings

Reference ID	Entry ID	Strength	Remarks
CCM	DSP-16	8	MFA enforcement strengthens data retention and deletion control
CCM	IAM-12	9	MFA required for privileged or destructive operations

Assessment Requirements

ID	Description	Applicability
CCC.ObjStor.CN07.AR01	The object storage service MUST support a configuration option that requires MFA to be successfully completed before any object deletion can be attempted, regardless of the request interface.	tlp-clear tlp-green tlp-amber tlp-red
CCC.ObjStor.CN07.AR02	When MFA deletion protection is enabled on a bucket or object namespace, the service MUST deny any deletion request from an identity that has not satisfied the MFA requirement at the time of the request.	tlp-clear tlp-green tlp-amber tlp-red
CCC.ObjStor.CN07.AR03	When an attempt is made to delete an object, the service's audit logs MUST clearly record each deletion attempt, including whether MFA was required and whether validation was met.	tlp-clear tlp-green tlp-amber tlp-red