Add in ransomware control

finos · Mar 26, 2024 · 54ec5f3 · 54ec5f3
1 parent a66d7f7
commit 54ec5f3
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/control-catalog/control-catalog.md b/control-catalog/control-catalog.md
@@ -8,3 +8,14 @@
 | NIST CF  | Protect  |
 | MITRE ATT&CK Mitigations | [M1041](https://attack.mitre.org/mitigations/M1041) |
 | Threats | CCC.OS.T1 |
+
+| Key      | Value    |
+|----------|----------|
+| Control Id   | CCC.OS.C2   |
+| Objective | Block requests with KMS keys from unauthorized principals |
+| Description   | Block requests with unauthorized AWS account providing the KMS key |
+| Test | GIVEN you own the object storage bucket; WHEN a request encrypted with a KMS key from an unauthorized principal is made to the bucket; THEN the request should be denied |
+| Service Taxonomy Id  | CCC-020114 |
+| NIST CF  | Protect  |
+| MITRE ATT&CK Mitigations | None|
+| Threats | CCC.OS.T2 |