Skip to content

Microsoft Office System 2013 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Automatic receiving of small updates to improve reliability must be disallowed.

    Having access to updates, add-ins, and patches on the Office Online website can help users ensure computers are up to date and equipped with the latest security patches. However, to ensure updates ...
    Rule Medium Severity
  • SRG-APP-000141

    Group
  • The Internet Fax Feature must be disabled.

    Excel, PowerPoint, and Word users can use the Internet Fax feature to send documents to fax recipients through an Internet fax service provider. If your organization has policies that govern the ti...
    Rule Medium Severity
  • SRG-APP-000141

    Group
  • Online content options must be configured for offline content availability.

    The Office 2013 Help system automatically searches MicrosoftOffice.com for content when a computer is connected to the Internet. Users can change this default by clearing the Search Microsoft Offic...
    Rule Medium Severity
  • SRG-APP-000141

    Group
  • The video informing a user about signing into Office365 must be disabled.

    Office 365 is a subscription-based service which offers access to various Microsoft Office applications. Access to Office 365 will not be permitted; only locally installed and configured Office 20...
    Rule Medium Severity
  • SRG-APP-000141

    Group
  • SRG-APP-000141

    Group
  • The ability to sign into Office365 must be disabled.

    Office 2013 can be configured to prompt users for credentials to Office365 using either their Microsoft Account or the user ID assigned by an organization for accessing Office 365. Access to Offic...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules