| CCC.Core.TH01 | Access Control is Misconfigured |
| CCC.Core.TH02 | Data is Intercepted in Transit |
| CCC.Core.TH03 | Deployment Region Network is Untrusted |
| CCC.Core.TH04 | Data is Replicated to Untrusted or External Locations |
| CCC.Core.TH05 | Data is Corrupted During Replication |
| CCC.Core.TH06 | Data is Lost or Corrupted |
| CCC.Core.TH07 | Logs are Tampered With or Deleted |
| CCC.Core.TH08 | Cost Management Data is Manipulated |
| CCC.Core.TH09 | Logs or Monitoring Data are Read by Unauthorized Users |
| CCC.Core.TH10 | Alerts are Intercepted |
| CCC.Core.TH11 | Event Notifications are Incorrectly Triggered |
| CCC.Core.TH12 | Resource Constraints are Exhausted |
| CCC.Core.TH13 | Resource Tags are Manipulated |
| CCC.Core.TH14 | Older Resource Versions are Exploited |
| CCC.Core.TH15 | Automated Enumeration and Reconnaissance by Non-human Entities |