Details

Disabling this function will prevent users from deleting their browsing history, which could be used to identify malicious websites and files that could later be used for anti-virus and Intrusion Detection System (IDS) signatures. Furthermore, preventing users from deleting browsing history could be used to identify abusive web surfing on government systems.

Solution

Windows group policy:
1. Open the group policy editor tool with gpedit.msc
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesGoogleGoogle Chrome
Policy Name: Enable deleting browser and download history
Policy State: Disabled
Policy Value: N/A

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Chrome_V2R4_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Windows.

References

• 800-53|AU-12a.
• CAT|II
• CCI|CCI-000169
• Rule-ID|SV-221586r615937_rule
• STIG-ID|DTBC-0052
• STIG-Legacy|SV-89845
• STIG-Legacy|V-75165
• Vuln-ID|V-221586

Source

• Tenable.com/audits