V1R12 changes
Microsoft Excel 2010 STIG V1R12 (2024-07-24) replaced V1R11 (2018-04-27): 47 checks added, 46 removed. It has 47 checks, against 46 in V1R11.
V1R12 checklistV1R11 checklist Compare V1R11 and V1R12 in STIG Compare
- 47 added
- 46 removed
- 0 updated
Added in V1R12 (47)
- V-241840CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-241841CAT IIOpen/Save actions for Excel 4 macrosheets and add-in files must be blocked.
- V-241842CAT IIOpen/Save actions for Excel 4 workbooks must be blocked.
- V-241843CAT IIOpen/Save actions for Excel 4 worksheets must be blocked.
- V-241844CAT IIActions for Excel 95 workbooks must be configured to edit in protected view.
- V-241845CAT IIActions for Excel 95-97 workbooks and templates must be configured to edit in protected view.
- V-241846CAT IIBlocking as default file block opening behavior must be enforced.
- V-241847CAT IIEnabling IE Bind to Object functionality must be present.
- V-241848CAT IIOpen/Save actions for Dif and Sylk files must be blocked.
- V-241849CAT IIOpen/Save actions for Excel 2 macrosheets and add-in files must be blocked.
- V-241850CAT IIOpen/Save actions for Excel 2 worksheets must be blocked.
- V-241851CAT IIOpen/Save actions for Excel 3 macrosheets and add-in files must be blocked.
- V-241852CAT IIOpen/Save actions for Excel 3 worksheets must be blocked.
- V-241853CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-241854CAT IICorrupt workbook options must be disallowed.
- V-241855CAT IIConfiguration for file validation must be enforced.
- V-241856CAT IIIOpen/Save actions for Web pages and Excel 2003 XML spreadsheets must be blocked.
- V-241857CAT IIFiles from the Internet zone must be opened in Protected View.
- V-241858CAT IIOpen/Save actions for dBase III / IV files must be blocked.
- V-241859CAT IINavigation to URL's embedded in Office products must be blocked.
- V-241860CAT IIScripted Window Security must be enforced.
- V-241861CAT IIAdd-on Management functionality must be allowed.
- V-241862CAT IIApplication add-ins must be signed by Trusted Publisher.
- V-241863CAT IIData Execution Prevention must be enforced.
- V-241864CAT IILinks that invoke instances of IE from within an Office product must be blocked.
- V-241865CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-241866CAT IIFile Downloads must be configured for proper restrictions.
- V-241867CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-241868CAT IIDisallowance of Trusted Locations on the network must be enforced.
- V-241869CAT IIInternet links and Network UNCs created as embedded hyperlinks must be prevented.
- V-241870CAT IISave files default format must be configured.
- V-241871CAT IIAutomatic republish to web pages must be disallowed.
- V-241872CAT IIAutoRepublish Warning Alert must be provided.
- V-241873CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-241874CAT IIFile types must be configured to provide mismatch warnings.
- V-241875CAT IIMacro storage must be in Personal macro workbooks.
- V-241876CAT IITrust access for VBA must be disallowed.
- V-241877CAT IIUpdate of automatic links must be configured to prompt.
- V-241878CAT IILoad pictures from Web pages must be disallowed.
- V-241879CAT IIProtection from zone elevation must be enforced.
- V-241880CAT IIPre-release versions of file formats new to Office Products must be blocked.
- V-241881CAT IIActiveX Installs must be configured for proper restriction.
- V-241882CAT IIFiles in unsafe locations must be opened in Protected View.
- V-241883CAT IIDocument behavior if file validation fails must be set.
- V-241884CAT IIAttachments opened from Outlook must be in Protected View.
- V-241885CAT IIWarning Bar settings for VBA macros must be configured.
- V-265889CAT IThe version of Excel running on the system must be a supported version.
Removed since V1R11 (46)
- V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-17174CAT IIEnabling IE Bind to Object functionality must be present.
- V-17175CAT IISaved from URL mark to assure Internet zone processing must be enforced.
- V-17183CAT IINavigation to URL's embedded in Office products must be blocked.
- V-17184CAT IILinks that invoke instances of IE from within an Office product must be blocked.
- V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-17322CAT IIPre-release versions of file formats new to Office Products must be blocked.
- V-17471CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-17473CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
- V-17520CAT IIDisallowance of Trusted Locations on the network must be enforced.
- V-17521CAT IISave files default format must be configured.
- V-17522CAT IITrust access for VBA must be disallowed.
- V-17545CAT IIWarning Bar settings for VBA macros must be configured.
- V-17621CAT IIFile types must be configured to provide mismatch warnings.
- V-17650CAT IIInternet links and Network UNCs created as embedded hyperlinks must be prevented.
- V-17652CAT IIAutomatic republish to web pages must be disallowed.
- V-17732CAT IIUpdate of automatic links must be configured to prompt.
- V-17744CAT IIAutoRepublish Warning Alert must be provided.
- V-17751CAT IILoad pictures from Web pages must be disallowed.
- V-17804CAT IIMacro storage must be in Personal macro workbooks.
- V-26584CAT IIAdd-on Management functionality must be allowed.
- V-26585CAT IIProtection from zone elevation must be enforced.
- V-26586CAT IIActiveX Installs must be configured for proper restriction.
- V-26587CAT IIFile Downloads must be configured for proper restrictions.
- V-26588CAT IIScripted Window Security must be enforced.
- V-26589CAT IIApplication add-ins must be signed by Trusted Publisher.
- V-26590CAT IIData Execution Prevention must be enforced.
- V-26591CAT IICorrupt workbook options must be disallowed.
- V-26592CAT IIConfiguration for file validation must be enforced.
- V-26595CAT IIOpen/Save actions for dBase III / IV files must be blocked.
- V-26596CAT IIOpen/Save actions for Dif and Sylk files must be blocked.
- V-26597CAT IIOpen/Save actions for Excel 2 macrosheets and add-in files must be blocked.
- V-26598CAT IIOpen/Save actions for Excel 2 worksheets must be blocked.
- V-26599CAT IIOpen/Save actions for Excel 3 macrosheets and add-in files must be blocked.
- V-26601CAT IIOpen/Save actions for Excel 3 worksheets must be blocked.
- V-26607CAT IIOpen/Save actions for Excel 4 macrosheets and add-in files must be blocked.
- V-26608CAT IIOpen/Save actions for Excel 4 workbooks must be blocked.
- V-26609CAT IIOpen/Save actions for Excel 4 worksheets must be blocked.
- V-26610CAT IIActions for Excel 95 workbooks must be configured to edit in protected view.
- V-26611CAT IIActions for Excel 95-97 workbooks and templates must be configured to edit in protected view.
- V-26612CAT IIBlocking as default file block opening behavior must be enforced.
- V-26613CAT IIIOpen/Save actions for Web pages and Excel 2003 XML spreadsheets must be blocked.
- V-26614CAT IIFiles from the Internet zone must be opened in Protected View.
- V-26615CAT IIFiles in unsafe locations must be opened in Protected View.
- V-26616CAT IIDocument behavior if file validation fails must be set.
- V-26617CAT IIAttachments opened from Outlook must be in Protected View.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R12 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.