CCC.Core.CN13: Minimize Lifetime of Encryption and Authentication Certificates
Control ID:CCC.Core.CN13
Title:Minimize Lifetime of Encryption and Authentication Certificates
Objective:Ensure that encryption and authentication certificates have a limited
lifetime to reduce the risk of compromise and ensure the use of
up-to-date security practices.
Control Family:
Data
Related Threats
| ID | Title | Description | External Mappings | Capability Mappings | Control Mappings |
|---|---|---|---|---|---|
| CCC.Core.TH18 | Encryption Key is Misused | Encryption keys may be used by an unauthorized entity due to inadequate key management practices or the compromise of a connected system. This could lead to the decryption of sensitive data, impacting its confidentiality and integrity. | 1 | 1 | 0 |
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP01 | Encryption in Transit Enabled by Default | The service automatically encrypts all data using industry-standard cryptographic protocols prior to transmission via a network interface. |
| CCC.Core.CP02 | Encryption at Rest Enabled by Default | The service automatically encrypts all data using industry-standard cryptographic protocols prior to being written to a storage medium. |