| ID | Title | Objective | Control Family | Threat Mappings | Guideline Mappings | Assessment Requirements |
|---|---|---|---|---|---|---|
| CCC.DataWar.CN01 | Enforce Use of Managed Views for Data Access | Ensure that data access is provided through managed views, restricting users from accessing underlying tables directly and enforcing consistent security policies. | Access | 1 | 3 | 1 |
| CCC.DataWar.CN02 | Enforce Column-Level Security Policies | Ensure that access to sensitive data columns is restricted based on user roles, preventing unauthorized access to sensitive information. | Access | 1 | 3 | 1 |
| CCC.DataWar.CN03 | Enforce Row-Level Security Policies | Ensure that access to data rows is restricted based on user roles or attributes, preventing unauthorized access to specific subsets of data. | Access | 1 | 3 | 1 |
Imports
| ID | Remarks |
|---|---|
| CCC.Core.CN01 | Prevent unencrypted requests |
| CCC.Core.CN02 | Ensure data encryption at rest for all stored data |
| CCC.Core.CN03 | Implement multi-factor authentication (MFA) for access |
| CCC.Core.CN04 | Log all access and changes |
| CCC.Core.CN05 | Prevent access from untrusted entities |
| CCC.Core.CN06 | Prevent deployment in restricted regions |
| CCC.Core.CN07 | Alert on unusual enumeration activity |
| CCC.Core.CN09 | Prevent tampering, deletion, or unauthorized access to access logs |
| CCC.Core.CN10 | Prevent data replication to destinations outside of defined trust perimeter |