Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000231

    <GroupDescription></GroupDescription>
    Group
    Show

  • Document metadata for password protected files must be protected.

    &lt;VulnDiscussion&gt;When an Office Open XML document is protected with a password and saved, any metadata associated with the document is encrypt...
    Rule Medium Severity
    Show

  • SRG-APP-000231

    <GroupDescription></GroupDescription>
    Group
    Show

  • The encryption type for password protected Open XML files must be set.

    &lt;VulnDiscussion&gt;If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confident...
    Rule Medium Severity
    Show

  • SRG-APP-000231

    <GroupDescription></GroupDescription>
    Group
    Show

  • The encryption type for password protected Office 97 thru Office 2003 must be set.

    &lt;VulnDiscussion&gt;If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confident...
    Rule Medium Severity
    Show

  • SRG-APP-000231

    <GroupDescription></GroupDescription>
    Group
    Show

  • Passwords for secured documents must be enforced.

    &lt;VulnDiscussion&gt;If 2013 Office users add passwords to documents, other users can be prevented from opening the documents. This capability can...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • Trust Bar notifications for Security messages must be enforced.

    &lt;VulnDiscussion&gt;The Message Bar in Office applications is used to identify security issues, such as unsigned macros or potentially unsafe add...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • Load controls in forms3 must be disabled from loading.

    &lt;VulnDiscussion&gt;ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users' computers. ActiveX controls ...
    Rule Medium Severity
    Show

  • SRG-APP-000131

    <GroupDescription></GroupDescription>
    Group
    Show

  • Users must be prevented from using or inserting apps that come from the Office Store.

    &lt;VulnDiscussion&gt;This policy setting allows users to be prevented from using or inserting apps that come from the Office Store. If this policy...
    Rule Medium Severity
    Show

  • SRG-APP-000328

    <GroupDescription></GroupDescription>
    Group
    Show

  • Changing permissions on rights managed content for users must be enforced.

    &lt;VulnDiscussion&gt;This setting controls whether Office 2013 users can change permissions for content that is protected with Information Rights ...
    Rule Medium Severity
    Show

  • SRG-APP-000328

    <GroupDescription></GroupDescription>
    Group
    Show

  • Office must be configured to not allow read with browsers.

    &lt;VulnDiscussion&gt;The Windows Rights Management Add-on for Internet Explorer provides a way for users who do not use the 2013 Office release to...
    Rule Medium Severity
    Show

  • SRG-APP-000340

    <GroupDescription></GroupDescription>
    Group
    Show

  • Connection verification of permissions must be enforced.

    &lt;VulnDiscussion&gt;Users are not required to connect to the network to verify permissions. If users do not need their licenses confirmed when at...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules