II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
DTOO124 - Scripted Window Security
Group -
Scripted Window Security must be enforced.
Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site to take control of the users' computers in some manner. Disabling or not ...Rule Medium Severity -
DTOO313 - Automatically download enclosures
Group -
Automatically downloading enclosures on RSS must be disallowed.
This policy setting controls Outlook's ability to automatically download enclosures on RSS items.Rule Medium Severity -
DTOO344 - Outlook Rich Text options
Group -
Outlook Rich Text options must be set for converting to plain text format.
Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message formatting is maintained and attachments are received. This setting control...Rule Medium Severity -
DTOO314 - Set message format
Group -
Default message format must be set to use Plain Text.
Outlook uses HTML as the default email format. HTML format poses a security risk by embedding information into the email itself, which could allow for release of sensitive information. If a user at...Rule Medium Severity -
DTOO315 - Outlook Security settings
Group -
Outlook must be configured not to prompt users to choose security settings if default settings fail.
This policy prompts the user to choose security settings if default settings fail, but allowing users to select their own security settings would result in inconsistent enforcement in the organizat...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.