Skip to content
ATO Pathways
  Log In

Microsoft Office System 2013 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The prompt to save to OneDrive (formerly SkyDrive) must be disabled.

    &lt;VulnDiscussion&gt;OneDrive (formerly SkyDrive) is a cloud based storage feature that introduces the capability for users to save documents to l...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Office Presentation Service must be removed as an option for presenting PowerPoint and Word online.

    &lt;VulnDiscussion&gt;The Office Presentation Service is a free, public service that allows others to follow along in a web browser. Allowing this...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Office Feedback tool must be disabled.

    &lt;VulnDiscussion&gt;The "Office Feedback" tool, also called "Send-a-Smile", allows a user to click on an icon and send feedback to Microsoft. App...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Roaming settings must be stored locally and not synchronized to the Microsoft Office roaming settings web service.

    &lt;VulnDiscussion&gt;Microsoft Office includes the ability to roam settings for specific Office features amongst devices by storing this data in t...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled.

    &lt;VulnDiscussion&gt;Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Office Telemetry Agent and Office applications must be configured to collect telemetry data.

    &lt;VulnDiscussion&gt;Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Documents must be configured to not open as Read Write when browsing.

    &lt;VulnDiscussion&gt;By default, when an Office 2013 document on a web server is opened using Internet Explorer, the appropriate application opens...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Relying on Vector markup Language (VML) for displaying graphics in browsers must be disallowed.

    &lt;VulnDiscussion&gt;When saving documents as web pages, Excel, PowerPoint, and Word can save vector-based graphics in Vector Markup Language (VML...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Automation Security to enforce macro level security in Office documents must be configured.

    &lt;VulnDiscussion&gt;When a separate program is used to launch Microsoft Office Excel, PowerPoint, or Word programmatically, any macros can run in...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ability to create an online presentation programmatically must be disabled.

    &lt;VulnDiscussion&gt;Allowing online presentations to be created programmatically allows for the capability of malicious content to become imbedde...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules