Ensure that state-change events for the service or a child resource cannot be read by unauthorized principals.
Core / Ccc / Controls / DEV
Restrict Access to State-Change Events
CCC.Core.CN17 · Observability
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP03 | Access Log Publication | The service automatically publishes structured, verbose records of activities performed within the scope of the service by external actors. |
| CCC.Core.CP07 | Event Publication | The service automatically publishes a structured state-change record upon creation, deletion, or modification of data, configuration, components, or child resources. |
| CCC.Core.CP09 | Metrics Publication | The service automatically publishes structured, numeric, time-series data points related to the performance, availability, and health of the service or its child resources. |
| CCC.Core.CP17 | Alerting | The service may be configured to emit a notification based on a user-defined condition related to the data published by a child or networked resource. |
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Core.TH10 | State-change Events are Read by Unauthorized Entities | Unauthorized access to state-change events can reveal information about the system's design and usage patterns. This opens the system up to attacks of opportunity and support the planning of attacks on the service, system, or network. |
Assessment Requirements
| ID | Text | Applicability |
|---|---|---|
| CCC.Core.CN17.AR01 | When state-change events are published for the service or a child resource, the service MUST restrict read access to authorized principals. | tlp-green, tlp-amber, tlp-red |