Skip to main content

CCC.Core.C02: Encrypt Data for Storage

Control ID:CCC.Core.C02
Title:Encrypt Data for Storage
Objective:Ensure that all data stored is encrypted at rest using strong encryption algorithms.
Control Family:
Data

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH01Access Control is MisconfiguredMisconfigured access controls may grant excessive privileges or fail to restrict unauthorized access to the service and its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.F06Access ControlThe service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
NIST-CSF
PR.DS-1
0
-
CCM
DSP-17
0
-
NIST_800_53
SC-13
0
-
NIST_800_53
SC-28
0
-

Assessment Requirements

IDDescriptionApplicability
CCC.Core.C02.TR01When data is stored, it MUST be encrypted using the latest industry-standard encryption methods.
tlp-green
tlp-amber
tlp-red