What changed in Microsoft Access 2013 STIG V1R7V1R7 changes

Microsoft Access 2013 STIG V1R7 (2024-07-24) replaced V1R6 (2018-04-27): 18 checks added, 17 removed. It has 18 checks, against 17 in V1R6.

V1R7 checklistV1R6 checklist Compare V1R6 and V1R7 in STIG Compare

  • 18 added
  • 17 removed
  • 0 updated

Added in V1R7 (18)

  • V-242312CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-242313CAT IIEnabling IE Bind to Object functionality must be present.
  • V-242314CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-242315CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-242316CAT IIScripted Window Security must be enforced.
  • V-242317CAT IIAdd-on Management functionality must be allowed.
  • V-242318CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-242319CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-242320CAT IIThe configuration for enabling of hyperlinks must be enforced.
  • V-242321CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-242322CAT IIFile Downloads must be configured for proper restrictions.
  • V-242323CAT IIDatabase functionality configurations must be displayed to the user.
  • V-242324CAT IIIThe Save commands default file format must be configured.
  • V-242325CAT IIIPrompts to convert older databases must be enforced.
  • V-242326CAT IIProtection from zone elevation must be enforced.
  • V-242327CAT IIActiveX Installs must be configured for proper restriction.
  • V-242328CAT IITrust access for VBA must be disallowed.
  • V-265888CAT IThe version of Microsoft Access running on the system must be a supported version.

Removed since V1R6 (17)

  • V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-17174CAT IIEnabling IE Bind to Object functionality must be present.
  • V-17175CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-17183CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-17184CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-17545CAT IITrust access for VBA must be disallowed.
  • V-17584CAT IIIThe Save commands default file format must be configured.
  • V-17603CAT IIIPrompts to convert older databases must be enforced.
  • V-17757CAT IIDatabase functionality configurations must be displayed to the user.
  • V-17810CAT IIThe configuration for enabling of hyperlinks must be enforced.
  • V-26584CAT IIAdd-on Management functionality must be allowed.
  • V-26585CAT IIProtection from zone elevation must be enforced.
  • V-26586CAT IIActiveX Installs must be configured for proper restriction.
  • V-26587CAT IIFile Downloads must be configured for proper restrictions.
  • V-26588CAT IIScripted Window Security must be enforced.
  • V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R7 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.