Skip to content

Microsoft Project 2013 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • DTOO127 - Add-ins are signed by Trusted Publisher

    Group
  • Add-ins to Office applications must be signed by a Trusted Publisher.

    Office 2013 applications do not check the digital signature on application add-ins before opening them. Disabling or not configuring this setting may allow an application to load a dangerous add-i...
    Rule Medium Severity
  • DTOO131 - Trust Bar Notifications

    Group
  • Trust Bar Notifications for unsigned application add-ins must be blocked.

    If an application is configured to require all add-ins to be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Ba...
    Rule Medium Severity
  • DTOO304 - VBA Macro Warning settings

    Group
  • Warning Bar settings for VBA macros must be configured.

    When users open files containing VBA macros, applications open the files with the macros disabled and displays the Trust Bar with a warning that macros are present and have been disabled. Users may...
    Rule Medium Severity
  • DTOO346 - Untrusted intranet zone

    Group
  • Untrusted intranet zone access to Project servers must not be allowed.

    Enabling this setting allows users to access Project server websites and workspaces outside of the trusted Internet zone. As a result, malicious code could become active on user computers or the n...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules