Skip to main content
← Back to CCC Virtual Private Cloud

CCC.TH01: Access Control is Misconfigured

Threat ID:CCC.TH01
Title:Access Control is Misconfigured
Description:

An attacker can exploit misconfigured access controls to grant excessive privileges or gain unauthorized access to sensitive resources.

Related Features:
IDTitleDescription
CCC.F06Identity Based Access ControlProvides the ability to determine access to resources based on attributes associated with a user identity.
Related Controls:
IDTitle
CCC.C02Ensure Data Encryption at Rest for All Stored Data
CCC.C03Implement Multi-factor Authentication (MFA) for Access
CCC.C04Log All Access and Changes
CCC.C05Prevent Access from Untrusted Entities