Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • DTOO124 - Scripted Window Security

    <GroupDescription></GroupDescription>
    Group
    Show

  • Scripted Window Security must be enforced.

    &lt;VulnDiscussion&gt;Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site t...
    Rule Medium Severity
    Show

  • DTOO313 - Automatically download enclosures

    <GroupDescription></GroupDescription>
    Group
    Show

  • Automatically downloading enclosures on RSS must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting controls Outlook's ability to automatically download enclosures on RSS items.&lt;/VulnDiscussion&gt;&lt;F...
    Rule Medium Severity
    Show

  • DTOO344 - Outlook Rich Text options

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook Rich Text options must be set for converting to plain text format.

    &lt;VulnDiscussion&gt;Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message for...
    Rule Medium Severity
    Show

  • DTOO314 - Set message format

    <GroupDescription></GroupDescription>
    Group
    Show

  • Default message format must be set to use Plain Text.

    &lt;VulnDiscussion&gt;Outlook uses HTML as the default email format. HTML format poses a security risk by embedding information into the email itse...
    Rule Medium Severity
    Show

  • DTOO315 - Outlook Security settings

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook must be configured not to prompt users to choose security settings if default settings fail.

    &lt;VulnDiscussion&gt;This policy prompts the user to choose security settings if default settings fail, but allowing users to select their own sec...
    Rule Medium Severity
    Show

  • DTOO316 - Minimum encryption settings

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook minimum encryption key length settings must be set.

    &lt;VulnDiscussion&gt;This setting allows the minimum key length for an encrypted email message to be configured.&lt;/VulnDiscussion&gt;&lt;FalsePo...
    Rule Medium Severity
    Show

  • DTOO317 - Signed/encrypted messages

    <GroupDescription></GroupDescription>
    Group
    Show

  • Replies or forwards to signed/encrypted messages must be signed/encrypted.

    &lt;VulnDiscussion&gt;This setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted. &lt;/VulnDiscus...
    Rule Medium Severity
    Show

  • DTOO320 - Check e-mail address against certificate

    <GroupDescription></GroupDescription>
    Group
    Show

  • Check e-mail addresses against addresses of certificates being used must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting controls whether Outlook verifies the user's email address with the address associated with the certifica...
    Rule Medium Severity
    Show

  • DTOO424 - Disable weather bar in Outlook

    <GroupDescription></GroupDescription>
    Group
    Show

  • The use of the weather bar in Outlook must be disabled

    &lt;VulnDiscussion&gt;The Weather Bar in Outlook displays weather conditions and forecast for a geographic location. By default, Outlook uses weath...
    Rule Medium Severity
    Show

  • DTOO425 - Disable Internet and network path into hyperlinks

    <GroupDescription></GroupDescription>
    Group
    Show

  • Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.

    &lt;VulnDiscussion&gt;The ability of Outlook to automatically turn text that represents Internet and network paths into hyperlinks would allow user...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules