Details

Users can select Add Signature Services (from the Signature Line drop-down menu on the Insert tab of the Ribbon in Excel 2013, PowerPoint 2013, and Word 2013) to see a list of signature service providers on the Microsoft Office website. If an organization has policies that govern the use of external resources such as signature providers or Office Marketplace, allowing users to access the Add Signature Services menu item might enable them to violate those policies.

Solution

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Signing ‘Suppress external signature services menu item’ to ‘Enabled’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_OfficeSystem_2013_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• Rule-ID|SV-228521r508020_rule
• STIG-ID|DTOO204
• STIG-Legacy|SV-52752
• STIG-Legacy|V-17805
• Vuln-ID|V-228521

Source

• Tenable.com/audits