I - Mission Critical Public
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000231
Group -
Document metadata for password protected files must be protected.
When an Office Open XML document is protected with a password and saved, any metadata associated with the document is encrypted along with the rest of the document's contents. If this configuration...Rule Medium Severity -
SRG-APP-000231
Group -
The encryption type for password protected Open XML files must be set.
If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confidentiality, Microsoft Office application files can be encrypted and password...Rule Medium Severity -
SRG-APP-000231
Group -
The encryption type for password protected Office 97 thru Office 2003 must be set.
If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confidentiality, Microsoft Office application files can be encrypted and password...Rule Medium Severity -
SRG-APP-000231
Group -
Passwords for secured documents must be enforced.
If 2013 Office users add passwords to documents, other users can be prevented from opening the documents. This capability can provide an extra level of protection to documents already protected by ...Rule Medium Severity -
SRG-APP-000209
Group -
Trust Bar notifications for Security messages must be enforced.
The Message Bar in Office applications is used to identify security issues, such as unsigned macros or potentially unsafe add-ins. When such issues are detected, the application disables the unsafe...Rule Medium Severity -
SRG-APP-000209
Group -
Load controls in forms3 must be disabled from loading.
ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users' computers. ActiveX controls can access the local file system and change the registry settings of the...Rule Medium Severity -
SRG-APP-000131
Group -
Users must be prevented from using or inserting apps that come from the Office Store.
This policy setting allows users to be prevented from using or inserting apps that come from the Office Store. If this policy setting is enabled, apps from the Office Store are blocked. If this pol...Rule Medium Severity -
SRG-APP-000328
Group -
Changing permissions on rights managed content for users must be enforced.
This setting controls whether Office 2013 users can change permissions for content that is protected with Information Rights Management (IRM). The Information Rights Management feature of Office 20...Rule Medium Severity -
SRG-APP-000328
Group -
Office must be configured to not allow read with browsers.
The Windows Rights Management Add-on for Internet Explorer provides a way for users who do not use the 2013 Office release to view, but not alter, files with restricted permissions. By default, IRM...Rule Medium Severity -
SRG-APP-000340
Group -
Connection verification of permissions must be enforced.
Users are not required to connect to the network to verify permissions. If users do not need their licenses confirmed when attempting to open Office documents, they might be able to access document...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.