CCC Audit Logging Capabilities
Capabilities for Audit Logging technologies, as defined by the FINOS Common Cloud Controls project.
- ID
- CCC.AuditLog.CP
- Version
- v2026.06-rc3
- Gemara version
- v1.2.0
- Author
- FINOS Common Cloud Controls
Observability
The Observability group covers entries related to logging, monitoring, metrics, alerting, and event publication. This includes audit trail integrity, enumeration detection, and protection against tampering or unauthorized access to operational telemetry.
CCC.AuditLog.CP01 Default Retention Period
Cloud providers support a default minimum retention of audit log data.
CCC.AuditLog.CP02 Export
Support for manual "one off" exporting or downloading of raw log events.
CCC.AuditLog.CP03 Sink
Ability to continually stream audit log data to a hosted storage bucket or data lake solution.
CCC.AuditLog.CP04 Event Types
Audit events are generated with different data types to provide specific fields for the system which generated the event, such as Management Event, Data Event and Policy Event.
CCC.AuditLog.CP05 Time Search
Ability to search for audit events across a specific time range.
CCC.AuditLog.CP06 Filtering
Ability to filter audit events based on specific attribute.
CCC.AuditLog.CP07 Immutable Log Entries
Audit Log events are immutable and cannot be altered or deleted once generated.
CCC.AuditLog.CP08 External Sink
Audit log events can be configured to be sent to a external SIEM or data analysis provider outside of the cloud platform.