Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • DTOO316 - Minimum encryption settings

    Group
  • Outlook minimum encryption key length settings must be set.

    This setting allows the minimum key length for an encrypted email message to be configured.
    Rule Medium Severity
  • DTOO317 - Signed/encrypted messages

    Group
  • Replies or forwards to signed/encrypted messages must be signed/encrypted.

    This setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted.
    Rule Medium Severity
  • DTOO320 - Check e-mail address against certificate

    Group
  • Check e-mail addresses against addresses of certificates being used must be disallowed.

    This policy setting controls whether Outlook verifies the user's email address with the address associated with the certificate used for signing.
    Rule Medium Severity
  • DTOO424 - Disable weather bar in Outlook

    Group
  • The use of the weather bar in Outlook must be disabled

    The Weather Bar in Outlook displays weather conditions and forecast for a geographic location. By default, Outlook uses weather data provided by MSN Weather. The Weather Bar supports third-party we...
    Rule Medium Severity
  • DTOO425 - Disable Internet and network path into hyperlinks

    Group
  • Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.

    The ability of Outlook to automatically turn text that represents Internet and network paths into hyperlinks would allow users to click on those hyperlinks in email message and access malicious or ...
    Rule Medium Severity
  • DTOO104 - Disable user name and password

    Group
  • Disabling of user name and password syntax from being used in URLs must be enforced.

    The Uniform Resource Locator (URL) standard allows user authentication to be included in URL strings in the form http://username:password@example.com. A malicious user might use this URL syntax to ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules