CCC.Core.TH03: Deployment Region Network is Untrusted
Threat ID:CCC.Core.TH03
Title:Deployment Region Network is Untrusted
Description:
Systems are susceptible to unauthorized access or interception by actors with social or physical control over the network in which they are deployed. If the geopolitical status of the deployment network is untrusted, unstable, or insecure, this could result in a loss of confidentiality, integrity, or availability of the service and its data.
External Mappings
Controls
ID | Title | Objective | Control Family | Threat Mappings | Guideline Mappings | Assessment Requirements |
---|---|---|---|---|---|---|
CCC.SecMgmt.C02 | Enforce Secret Replication Policies | Ensure that secrets are replicated only to authorized locations as per organizational data residency and compliance requirements. | Data Protection | 2 | 3 | 1 |