| CCC.Core.TH01 | Access control is misconfigured |
| CCC.Core.TH03 | Deployment region network is untrusted |
| CCC.Core.TH04 | Data is replicated to untrusted or external locations |
| CCC.Core.TH05 | Data is corrupted during replication |
| CCC.Core.TH06 | Data is lost or corrupted |
| CCC.Core.TH07 | Logs are Tampered With or Deleted |
| CCC.Core.TH09 | Logs or Monitoring Data are Read by Unauthorized Users |
| CCC.Core.TH11 | Event Notifications are Incorrectly Triggered |
| CCC.Core.TH13 | Resource Tags Are Manipulated |
| CCC.Core.TH14 | Older Resource Versions Are Exploited |
| CCC.Core.TH15 | Automated Enumeration and Reconnaissance by Non-Human Entities |
| CCC.Core.TH16 | Logging and Monitoring are Disabled |