Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • DTOO150 - Automatic Link Updates

    <GroupDescription></GroupDescription>
    Group
  • The Update of automatic links setting must be configured to prompt user before allowing links to be updated.

    &lt;VulnDiscussion&gt;If an Excel workbook contains links to other documents and users are not prompted to approve them, the contents of the workbo...
    Rule Medium Severity
  • DTOO141 - AutoRepublish Warning Alert

    <GroupDescription></GroupDescription>
    Group
  • The AutoRepublish warning alert must be provided.

    &lt;VulnDiscussion&gt;AutoRepublish is a feature in Excel allowing workbooks to be automatically republished to the World Wide Web each time the wo...
    Rule Medium Severity
  • DTOO152 - Load pics from Web not in Excel

    <GroupDescription></GroupDescription>
    Group
  • The loading of images from web pages must not be allowed.

    &lt;VulnDiscussion&gt;When users open web pages in Excel, Excel loads any graphics included in the pages, regardless of whether or not they were or...
    Rule Medium Severity
  • DTOO145 - Store macro in workbook

    <GroupDescription></GroupDescription>
    Group
  • Macro storage must be in personal macro workbooks.

    &lt;VulnDiscussion&gt;The Record Macro dialog box includes a drop-down menu allowing users to choose whether to store the new macro in the current ...
    Rule Medium Severity
  • DTOO126 - Add-on Management

    <GroupDescription></GroupDescription>
    Group
  • Add-on Management functionality must be allowed.

    &lt;VulnDiscussion&gt;Internet Explorer add-ons are pieces of code, run in Internet Explorer, to provide additional functionality. Rogue add-ons ma...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules