Skip to main content

CCC.ObjStor.C03: Prevent Bucket Deletion Through Irrevocable Bucket Retention Policy

Control ID:CCC.ObjStor.C03
Title:Prevent Bucket Deletion Through Irrevocable Bucket Retention Policy
Objective:Ensure that object storage bucket is not deleted after creation, and that the preventative measure cannot be unset.
Control Family:
Data

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH06Data is Lost or CorruptedServices that rely on accurate data are susceptible to disruption in the event of data loss or corruption. Any actions that lead to the unintended deletion, alteration, or limited access to data can impact the availability of the service and the system it is part of.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.F11BackupThe service can generate copies of its data or configurations in the form of automated backups, snapshot-based backups, or incremental backups.
CCC.Core.F18Resource VersioningThe service assigns versions to child resources to preserve, retrieve, and restore past iterations.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
NIST-CSF
PR.DS-1
0
-
CCM
DSP-16
0
-
ISO_27001
2022 A.8.1.4
0
-
NIST_800_53
SC-28
0
-
NIST_800_53
CP-10
0
-

Assessment Requirements

IDDescriptionApplicability
CCC.ObjStor.C03.TR01When an object storage bucket deletion is attempted, the bucket MUST be fully recoverable for a set time-frame after deletion is requested.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.ObjStor.C03.TR02When an attempt is made to modify the retention policy for an object storage bucket, the service MUST prevent the policy from being modified.
tlp-clear
tlp-green
tlp-amber
tlp-red