Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update relational database controls from markdown to yaml #540

Merged
merged 12 commits into from
Jan 20, 2025
Merged

Update relational database controls from markdown to yaml #540

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
adb0dee
Update relational database controls from markdown to yaml
dogle-scottlogic Nov 15, 2024
04a8aa3
add common controls to RDMS
dogle-scottlogic Nov 15, 2024
dcfdcc9
Remove RDMS.C04 as it is covered by common controls
dogle-scottlogic Nov 18, 2024
ca52b72
Fix merge conflicts
dogle-scottlogic Dec 5, 2024
90631b4
Update services/database/relational/controls.yaml
mlysaght2017 Dec 8, 2024
8ec40f1
Update services/database/relational/controls.yaml
mlysaght2017 Dec 8, 2024
42bc5a1
Update services/database/relational/controls.yaml
mlysaght2017 Dec 8, 2024
6c9c1f6
Merge branch 'main' into CCC-494-md-to-yaml
eddie-knight Jan 8, 2025
5733dd0
Merge branch 'main' into CCC-494-md-to-yaml
mlysaght2017 Jan 20, 2025
c78b811
Add in yaml linting fixes
mlysaght2017 Jan 20, 2025
6c87446
Add in schema fixes
mlysaght2017 Jan 20, 2025
cc89133
Merge branch 'main' into CCC-494-md-to-yaml
eddie-knight Jan 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
110 changes: 0 additions & 110 deletions services/database/relational/controls.md
View file
Open in desktop

This file was deleted.

48 changes: 46 additions & 2 deletions services/database/relational/controls.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,12 +11,12 @@

controls:
- id: CCC.RDMS.C01
title: backup database to alternative trust-zone
title: Backup Database to Alternative Trust-Zone
objective: |
Ensure that databases are backed up and the backup is outside of the applications trust-zone
control_family: Data
threats:
- CCC.RDMS.TH14 # DB backup is uninentionally restored
- CCC.RDMS.TH14 # DB backup is unintentionally restored
nist_csf: PR.DS-11
control_mappings:
NIST_800_53:
Expand All @@ -29,3 +29,47 @@
tlp_levels:
- tlp_red
- tlp_amber

- id: CCC.RDMS.C02
title: Disable Access with Default Credentials
objective: |
Ensure that default credentials are disabled and only authorized
roles can access database resources.
control_family: Data
nist_csf: PR.AC-5
threats:
- M1041 # Restrict User Privileges

Check failure on line 41 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

String does not match the pattern of "^((CCC\.TH\d{2,8})|(CCC\.\w{1,8}\.TH\d{2,8}))$". yaml-schema: file:///schemas/controls-schema.json. 

String does not match the pattern of "^((CCC\.TH\d{2,8})|(CCC\.\w{1,8}\.TH\d{2,8}))$".

Threat IDs

Source: controls-schema.json (schemas/controls-schema.json)
control_mappings:
CCM:
- IAM-09
- IAM-13
ISO_27001:
- 2013 A.9.2.6
NIST_800_53:
- AC-17
test_requirements:
- id: CCC.RDMS.C2.TR01

Check failure on line 51 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

Missing property "tlp_levels". yaml-schema: file:///schemas/controls-schema.json. 

Missing property "tlp_levels".

Test requirement ID in the format CCC.<Service Category Abbreviation>.<Control ID>.TR##

Source: controls-schema.json (schemas/controls-schema.json)
mlysaght2017 marked this conversation as resolved.
Show resolved Hide resolved
text: Secure Database Access Control

- id: CCC.RDMS.C03
title: Restrict Snapshot Collection To Trusted Roles
objective: Limit snapshot collection capabilities to trusted roles.
control_family: Data
nist_csf: PR.DS-3
threats:
- M1054 # Restrict Data Access

Check failure on line 60 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

String does not match the pattern of "^((CCC\.TH\d{2,8})|(CCC\.\w{1,8}\.TH\d{2,8}))$". yaml-schema: file:///schemas/controls-schema.json. 

String does not match the pattern of "^((CCC\.TH\d{2,8})|(CCC\.\w{1,8}\.TH\d{2,8}))$".

Threat IDs

Source: controls-schema.json (schemas/controls-schema.json)
control_mappings:
CCM:
- DSI-05
- DSI-07
ISO_27001:
- 2013 A.12.3.1
NIST_800_53:
- CP-09
test_requirements:
- id: CCC.RDMS.C3.TR01

Check failure on line 70 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

Missing property "tlp_levels". yaml-schema: file:///schemas/controls-schema.json. 

Missing property "tlp_levels".

Test requirement ID in the format CCC.<Service Category Abbreviation>.<Control ID>.TR##

Source: controls-schema.json (schemas/controls-schema.json)
text: Snapshot collection by trusted roles
- id: CCC.RDMS.C3.TR02

Check failure on line 72 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

Missing property "tlp_levels". yaml-schema: file:///schemas/controls-schema.json. 

Missing property "tlp_levels".

Test requirement ID in the format CCC.<Service Category Abbreviation>.<Control ID>.TR##

Source: controls-schema.json (schemas/controls-schema.json)
mlysaght2017 marked this conversation as resolved.
Show resolved Hide resolved
text: Restriction of snapshot collection capabilities
- id: CCC.RDMS.C3.TR03

Check failure on line 74 in services/database/relational/controls.yaml

View workflow job for this annotation

GitHub Actions / yaml-checker / yaml-check

Missing property "tlp_levels". yaml-schema: file:///schemas/controls-schema.json. 

Missing property "tlp_levels".

Test requirement ID in the format CCC.<Service Category Abbreviation>.<Control ID>.TR##

Source: controls-schema.json (schemas/controls-schema.json)
mlysaght2017 marked this conversation as resolved.
Show resolved Hide resolved
text: Prevent unauthorized snapshot collection
Loading