Microsoft Office System 2013 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled.
Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or raises an error in certain Office 2013 applications, the Office Telemet...Rule Medium Severity -
SRG-APP-000141
Group -
SRG-APP-000210
Group -
Documents must be configured to not open as Read Write when browsing.
By default, when an Office 2013 document on a web server is opened using Internet Explorer, the appropriate application opens the file in read-only mode. However, if the default configuration is ch...Rule Medium Severity -
SRG-APP-000210
Group -
Relying on Vector markup Language (VML) for displaying graphics in browsers must be disallowed.
When saving documents as web pages, Excel, PowerPoint, and Word can save vector-based graphics in Vector Markup Language (VML), which enables Internet Explorer to display them smoothly at any resol...Rule Medium Severity -
SRG-APP-000210
Group -
SRG-APP-000210
Group -
The ability to create an online presentation programmatically must be disabled.
Allowing online presentations to be created programmatically allows for the capability of malicious content to become imbedded in those programmatically created presentations.Rule Medium Severity -
SRG-APP-000231
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules