Skip to main content

CCC.ObjStor.CN04: Objects have an Effective Retention Policy by Default

Control ID:CCC.ObjStor.CN04
Title:Objects have an Effective Retention Policy by Default
Objective:Ensure that all objects stored in the object storage system have a retention policy applied by default, preventing premature deletion or modification of objects.
Control Family:
Data

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.Core.TH06Data is Lost or CorruptedServices that rely on accurate data are susceptible to disruption in the event of data loss or corruption. Any actions that lead to the unintended deletion, alteration, or limited access to data can impact the availability of the service and the system it is part of.
1
1
0

Related Capabilities

IDTitleDescription
CCC.Core.CP18Resource VersioningThe service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
CCM
DSP-16
10
Data Retention and Deletion
CCM
DSP-17
1
Sensitive Data Protection

Assessment Requirements

IDDescriptionApplicability
CCC.ObjStor.CN04.AR01When an object is uploaded to the object storage system, the object MUST automatically receive a default retention policy that prevents premature deletion or modification.
tlp-clear
tlp-green
tlp-amber
tlp-red
CCC.ObjStor.CN04.AR02When an attempt is made to delete or modify an object that is subject to an active retention policy, the service MUST prevent the action from being completed.
tlp-clear
tlp-green
tlp-amber
tlp-red