V1R8 changes
Microsoft Excel 2013 STIG V1R8 (2024-07-24) replaced V1R7 (2018-04-27): 48 checks added, 47 removed. It has 48 checks, against 47 in V1R7.
V1R8 checklistV1R7 checklist Compare V1R7 and V1R8 in STIG Compare
- 48 added
- 47 removed
- 0 updated
Added in V1R8 (48)
- V-242329CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-242330CAT IIOpen/Save actions for Excel 4 macrosheets and add-in files must be blocked.
- V-242331CAT IIOpen/Save actions for Excel 4 workbooks must be blocked.
- V-242332CAT IIOpen/Save actions for Excel 4 worksheets must be blocked.
- V-242333CAT IIActions for Excel 95 workbooks must be configured to edit in Protected View.
- V-242334CAT IIActions for Excel 95-97 workbooks and templates must be configured to edit in Protected View.
- V-242335CAT IIBlocking as default file block opening behavior must be enforced.
- V-242336CAT IIInternet Explorer Bind to Object functionality must be enabled.
- V-242337CAT IIOpen/Save actions for Dif and Sylk files must be blocked.
- V-242338CAT IIOpen/Save actions for Excel 2 macrosheets and add-in files must be blocked.
- V-242339CAT IIOpen/Save actions for Excel 2 worksheets must be blocked.
- V-242340CAT IIOpen/Save actions for Excel 3 macrosheets and add-in files must be blocked.
- V-242341CAT IIOpen/Save actions for Excel 3 worksheets must be blocked.
- V-242342CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
- V-242343CAT IIConfiguration for file validation must be enforced.
- V-242344CAT IIIOpen/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.
- V-242345CAT IIFiles from the Internet zone must be opened in Protected View.
- V-242346CAT IIOpen/Save actions for dBase III / IV files must be blocked.
- V-242347CAT IINavigation to URLs embedded in Office products must be blocked.
- V-242348CAT IIScripted Window Security must be enforced.
- V-242349CAT IIAdd-on Management functionality must be allowed.
- V-242350CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-242351CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-242352CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-242353CAT IIFile downloads must be configured for proper restrictions.
- V-242354CAT IIAll automatic loading from trusted locations must be disabled.
- V-242355CAT IIDisallowance of trusted locations on the network must be enforced.
- V-242356CAT IIInternet links and Network UNCs created as embedded hyperlinks must be prevented.
- V-242357CAT IIThe Save commands default file format must be configured.
- V-242358CAT IIAutomatic republish to web pages must be disallowed.
- V-242359CAT IIThe AutoRepublish warning alert must be provided.
- V-242360CAT IIThe scanning of encrypted macros in open XML documents must be enforced.
- V-242361CAT IIFile types must be configured to provide mismatch warnings
- V-242362CAT IIMacro storage must be in personal macro workbooks.
- V-242363CAT IITrust access for VBA must be disallowed.
- V-242364CAT IIThe Update of automatic links setting must be configured to prompt user before allowing links to be updated.
- V-242365CAT IIThe loading of images from web pages must not be allowed.
- V-242366CAT IIProtection from zone elevation must be enforced.
- V-242367CAT IIThe opening of pre-release versions of file formats new to Excel 2013 through the Compatibility Pack for Office 2013 and Excel 2013 Converter must be blocked.
- V-242368CAT IIActiveX Installs must be configured for proper restriction.
- V-242369CAT IIFiles in unsafe locations must be opened in Protected View.
- V-242370CAT IIDocument behavior if file validation fails must be set.
- V-242371CAT IIExcel attachments opened from Outlook must be in Protected View.
- V-242372CAT IIWarning Bar settings for VBA macros must be configured.
- V-242373CAT IIWEBSERVICE functions must be disabled.
- V-242374CAT IICorrupt workbook options must be disallowed.
- V-242375CAT IIMacros must be blocked from running in Office 2013 files from the Internet.
- V-265890CAT IThe version of Excel running on the system must be a supported version.
Removed since V1R7 (47)
- V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-17174CAT IIInternet Explorer Bind to Object functionality must be enabled.
- V-17175CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
- V-17183CAT IINavigation to URLs embedded in Office products must be blocked.
- V-17184CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
- V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-17322CAT IIThe opening of pre-release versions of file formats new to Excel 2013 through the Compatibility Pack for Office 2013 and Excel 2013 Converter must be blocked.
- V-17471CAT IIAll automatic loading from trusted locations must be disabled.
- V-17473CAT IIThe scanning of encrypted macros in open XML documents must be enforced.
- V-17520CAT IIDisallowance of trusted locations on the network must be enforced.
- V-17521CAT IIThe Save commands default file format must be configured.
- V-17522CAT IITrust access for VBA must be disallowed.
- V-17545CAT IIWarning Bar settings for VBA macros must be configured.
- V-17621CAT IIFile types must be configured to provide mismatch warnings
- V-17650CAT IIInternet links and Network UNCs created as embedded hyperlinks must be prevented.
- V-17652CAT IIAutomatic republish to web pages must be disallowed.
- V-17732CAT IIThe Update of automatic links setting must be configured to prompt user before allowing links to be updated.
- V-17744CAT IIThe AutoRepublish warning alert must be provided.
- V-17751CAT IIThe loading of images from web pages must not be allowed.
- V-17804CAT IIMacro storage must be in personal macro workbooks.
- V-26584CAT IIAdd-on Management functionality must be allowed.
- V-26585CAT IIProtection from zone elevation must be enforced.
- V-26586CAT IIActiveX Installs must be configured for proper restriction.
- V-26587CAT IIFile downloads must be configured for proper restrictions.
- V-26588CAT IIScripted Window Security must be enforced.
- V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-26592CAT IIConfiguration for file validation must be enforced.
- V-26595CAT IIOpen/Save actions for dBase III / IV files must be blocked.
- V-26596CAT IIOpen/Save actions for Dif and Sylk files must be blocked.
- V-26597CAT IIOpen/Save actions for Excel 2 macrosheets and add-in files must be blocked.
- V-26598CAT IIOpen/Save actions for Excel 2 worksheets must be blocked.
- V-26599CAT IIOpen/Save actions for Excel 3 macrosheets and add-in files must be blocked.
- V-26601CAT IIOpen/Save actions for Excel 3 worksheets must be blocked.
- V-26607CAT IIOpen/Save actions for Excel 4 macrosheets and add-in files must be blocked.
- V-26608CAT IIOpen/Save actions for Excel 4 workbooks must be blocked.
- V-26609CAT IIOpen/Save actions for Excel 4 worksheets must be blocked.
- V-26610CAT IIActions for Excel 95 workbooks must be configured to edit in Protected View.
- V-26611CAT IIActions for Excel 95-97 workbooks and templates must be configured to edit in Protected View.
- V-26612CAT IIBlocking as default file block opening behavior must be enforced.
- V-26613CAT IIIOpen/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.
- V-26614CAT IIFiles from the Internet zone must be opened in Protected View.
- V-26615CAT IIFiles in unsafe locations must be opened in Protected View.
- V-26616CAT IIDocument behavior if file validation fails must be set.
- V-26617CAT IIExcel attachments opened from Outlook must be in Protected View.
- V-41344CAT IIWEBSERVICE functions must be disabled.
- V-41346CAT IICorrupt workbook options must be disallowed.
- V-72831CAT IIMacros must be blocked from running in Office 2013 files from the Internet.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R8 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.