Skip to content

Microsoft Office System 2010 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • DTOO203 - Legacy Format signatures

    Group
  • DTOO192 - Load controls for forms3

    Group
  • DTOO179 - Open as Read/Write when browsing

    Group
  • Documents must be configured to not open as Read Write when browsing.

    Office document on a Web server using Internet Explorer, the appropriate application opens the file in read-only mode. However, if the default configuration is changed, the document is opened as re...
    Rule Medium Severity
  • DTOO199 - Permissions on managed content

    Group
  • DTOO178 - Uploads to Office Online

    Group
  • Upload of document templates to Office Online must be prevented.

    Office users can share Excel, PowerPoint, and Word templates they create with other Microsoft Office users around the world by uploading them to the community area of the Microsoft Office Online We...
    Rule Medium Severity
  • DTOO188 - Protect document metadata

    Group
  • DTOO187 - Protect metadata / rights managed docs

    Group
  • Rights managed Office Open XML files must be protected.

    When Information Rights Management (IRM) is used to restrict access to an Office Open XML document, any metadata associated with the document is not encrypted. This configuration could allow potent...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules