Skip to content

Microsoft Office System 2016 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The ability to run unsecure Office web add-ins and Catalogs must be disabled.

    <VulnDiscussion>This policy setting allows users to run unsecure web add-in, which are add-ins that have web page or catalog locations that a...
    Rule Medium Severity
  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
  • The Office Telemetry Agent must be configured to obfuscate the file name, file path, and title of Office documents before uploading telemetry data to the shared folder.

    &lt;VulnDiscussion&gt;This policy setting configures Office Telemetry Agent to disguise, or obfuscate, certain file properties that are reported in...
    Rule Medium Severity
  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
  • The ability to send personal information to Office must be disabled.

    &lt;VulnDiscussion&gt;This policy setting controls whether users can send personal information to Office. When users choose to send information Off...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules