Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000219

    <GroupDescription></GroupDescription>
    Group
    Show

  • SharePoint must implement an information system isolation boundary that minimizes the number of nonsecurity functions included within the boundary containing security functions.

    &lt;VulnDiscussion&gt;The information system isolates security functions from nonsecurity functions by means of an isolation boundary (implemented ...
    Rule High Severity
    Show

  • SRG-APP-000238

    <GroupDescription></GroupDescription>
    Group
    Show

  • SharePoint must implement security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.

    &lt;VulnDiscussion&gt;The information system isolates security functions from nonsecurity functions by means of an isolation boundary (implemented ...
    Rule Medium Severity
    Show

  • SRG-APP-000440

    <GroupDescription></GroupDescription>
    Group
    Show

  • SharePoint must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission, unless the transmitted data is otherwise protected by alternative physical measures.

    &lt;VulnDiscussion&gt;Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptogr...
    Rule High Severity
    Show

  • SRG-APP-000340

    <GroupDescription></GroupDescription>
    Group
    Show

  • SharePoint must prevent non-privileged users from circumventing malicious code protection capabilities.

    &lt;VulnDiscussion&gt;Malicious code protection software must be protected to prevent a non-privileged user or malicious piece of software from dis...
    Rule High Severity
    Show

  • SRG-APP-000179

    <GroupDescription></GroupDescription>
    Group
    Show

  • SharePoint must use mechanisms for authentication to a cryptographic module that meet the requirements of applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

    &lt;VulnDiscussion&gt;Certain encryption types are no longer considered secure. This setting configures a minimum encryption type for SharePoint. D...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules