Home
Security Hardening
DISA STIG Office System 2010 V1R12

DISA STIG Office System 2010 V1R12

DTOO193 – Office System – Automation Security to enforce macro level security in Office documents must be configured.
Details When a separate program is used to launch Microsoft Office Excel, PowerPoint, or Word programmatically, any macros can run...
DTOO194 – Office System – Hyperlink warnings for Office must be configured for use.
Details Unsafe hyperlinks are links that might pose a security risk if users click them. Clicking an unsafe link could...
DTOO188 – Office System – Document metadata for password protected files must be protected.
Details When an Office Open XML document is protected with a password and saved, any metadata associated with the document...
DTOO189 – Office System – The encryption type for password protected Open XML files must be set.
Details If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confidentiality, Office application...
DTOO190 – Office System – The encryption type for password protected Office 97 thru Office 2003 must be set.
Details If unencrypted files are intercepted, sensitive information in the files can be compromised. To protect information confidentiality, Microsoft Office...
DTOO191 – Office System – ActiveX control initialization must be disabled.
Details ActiveX controls can adversely affect a computer directly. In addition, malicious code can be used to compromise an ActiveX...
DTOO192 – Office System – Load controls in forms3 must be disabled from loading.
Details ActiveX controls are Component Object Model (COM) objects and have unrestricted access to users’ computers. ActiveX controls can access...
DTOO195 – Office System – Passwords for secured documents must be enforced.
Details If 2010 Office users add passwords to documents, other users can be prevented from opening the documents. This capability...
DTOO196 – Office System – A mix of policy and user locations for Office Products must be disallowed.
Details When Microsoft Office files are opened from trusted locations, all the content in the files is enabled and active....
DTOO197 – Office System – Smart Documents use of Manifests in Office must be disallowed.
Details An XML expansion pack is the group of files that constitutes a Smart Document in Excel and Word. You...

Prev Next

DISA STIG Office System 2010 V1R12

DTOO193 – Office System – Automation Security to enforce macro level security in Office documents must be configured.

DTOO194 – Office System – Hyperlink warnings for Office must be configured for use.

DTOO188 – Office System – Document metadata for password protected files must be protected.

DTOO189 – Office System – The encryption type for password protected Open XML files must be set.

DTOO190 – Office System – The encryption type for password protected Office 97 thru Office 2003 must be set.

DTOO191 – Office System – ActiveX control initialization must be disabled.

DTOO192 – Office System – Load controls in forms3 must be disabled from loading.

DTOO195 – Office System – Passwords for secured documents must be enforced.

DTOO196 – Office System – A mix of policy and user locations for Office Products must be disallowed.

DTOO197 – Office System – Smart Documents use of Manifests in Office must be disallowed.