Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • DTOO139 - Save files default format

    <GroupDescription></GroupDescription>
    Group
  • The Save commands default file format must be configured.

    &lt;VulnDiscussion&gt;When users create new PowerPoint files, PowerPoint 2013 saves them in the new *.pptx format. Ensure this setting is enabled ...
    Rule Medium Severity
  • DTOO146-Disable Trust access to VB Project Macros

    <GroupDescription></GroupDescription>
    Group
  • Trust access for VBA must be disallowed.

    &lt;VulnDiscussion&gt;VSTO projects require access to the Visual Basic for Applications project system in Excel, PowerPoint, and Word, even though ...
    Rule Medium Severity
  • DTOO304 - VBA Macro Warning settings

    <GroupDescription></GroupDescription>
    Group
  • Warning Bar settings for VBA macros must be configured.

    &lt;VulnDiscussion&gt;When users open files containing VBA macros, applications open the files with the macros disabled and displays the Trust Bar ...
    Rule Medium Severity
  • DTOO290 - Make Hidden marks visible in PowerPoint

    <GroupDescription></GroupDescription>
    Group
  • Hidden markup options must be visible.

    &lt;VulnDiscussion&gt;PowerPoint presentations that are saved in standard or HTML format can contain a flag indicating whether markup (comments or ...
    Rule Medium Severity
  • DTOO289 - Running programs in PowerPoint

    <GroupDescription></GroupDescription>
    Group
  • The ability to run programs from a PowerPoint presentation must be disallowed.

    &lt;VulnDiscussion&gt;Action buttons can be used to launch external programs from PowerPoint presentations. If a malicious person adds an action bu...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules