Skip to content

Microsoft Office System 2013 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000488

    <GroupDescription></GroupDescription>
    Group
  • ActiveX control initialization must be disabled.

    &lt;VulnDiscussion&gt;ActiveX controls can adversely affect a computer directly. In addition, malicious code can be used to compromise an ActiveX c...
    Rule Medium Severity
  • SRG-APP-000488

    <GroupDescription></GroupDescription>
    Group
  • Hyperlink warnings for Office must be configured for use.

    &lt;VulnDiscussion&gt;Unsafe hyperlinks are links that might pose a security risk if users click them. Clicking an unsafe link could compromise the...
    Rule Medium Severity
  • SRG-APP-000488

    <GroupDescription></GroupDescription>
    Group
  • Document Information panel Beaconing must show UI.

    &lt;VulnDiscussion&gt;This policy setting controls whether users see a security warning when they open custom Document Information Panels that cont...
    Rule Medium Severity
  • SRG-APP-000429

    <GroupDescription></GroupDescription>
    Group
  • Rights managed Office Open XML files must be protected.

    &lt;VulnDiscussion&gt;When Information Rights Management (IRM) is used to restrict access to an Office Open XML document, any metadata associated w...
    Rule Medium Severity
  • SRG-APP-000429

    <GroupDescription></GroupDescription>
    Group
  • Encrypt document properties must be configured for OLE documents.

    &lt;VulnDiscussion&gt;This policy setting allows a document's properties to be encrypted. This applies to OLE documents (Office 97-2003 compatible...
    Rule Medium Severity
  • SRG-APP-000456

    <GroupDescription></GroupDescription>
    Group
  • Office automatic updates must be enabled for Office products installed via Click-to-Run and configured to use a Trusted site.

    &lt;VulnDiscussion&gt;This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed v...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules