What changed in Microsoft Office System 2010 STIG V1R13V1R13 changes

Microsoft Office System 2010 STIG V1R13 (2024-07-24) replaced V1R12 (2018-04-27): 37 checks added, 37 removed. It has 37 checks, against 37 in V1R12.

V1R13 checklistV1R12 checklist Compare V1R12 and V1R13 in STIG Compare

  • 37 added
  • 37 removed
  • 0 updated

Added in V1R13 (37)

  • V-241931CAT IIAccess to updates, add-ins, and patches on Office.com must be disabled.
  • V-241932CAT IIUpload of document templates to Office Online must be prevented.
  • V-241933CAT IIDocuments must be configured to not open as Read Write when browsing.
  • V-241934CAT IIVector markup Language (VML) for displaying graphics in browsers must be disallowed.
  • V-241935CAT IIThe Help Improve Proofing Tools feature for Office must be configured.
  • V-241936CAT IIThe Opt-In Wizard must be disabled.
  • V-241937CAT IIThe Customer Experience Improvement Program for Office must be disabled.
  • V-241938CAT IIAutomatic receiving of small updates to improve reliability must be disallowed.
  • V-241939CAT IITrust Bar notifications for Security messages must be enforced.
  • V-241940CAT IIRights managed Office Open XML files must be protected.
  • V-241941CAT IIDocument metadata for password protected files must be protected.
  • V-241942CAT IIThe encryption type for password protected Open XML files must be set.
  • V-241943CAT IIThe encryption type for password protected Office 97 thru Office 2003 must be set.
  • V-241944CAT IIActiveX control initialization must be disabled.
  • V-241945CAT IILoad controls in forms3 must be disabled from loading.
  • V-241946CAT IIAutomation Security to enforce macro level security in Office documents must be configured.
  • V-241947CAT IIHyperlink warnings for Office must be configured for use.
  • V-241948CAT IIPasswords for secured documents must be enforced.
  • V-241949CAT IIA mix of policy and user locations for Office Products must be disallowed.
  • V-241950CAT IISmart Documents use of Manifests in Office must be disallowed.
  • V-241951CAT IIThe Internet Fax Feature must be disabled.
  • V-241952CAT IIChanging permissions on rights managed content for users must be enforced.
  • V-241953CAT IIOffice must be configured to not allow read with browsers.
  • V-241954CAT IIConnection verification of permissions must be enforced.
  • V-241955CAT IIMicrosoft passport Service for content must be disallowed.
  • V-241956CAT IILegacy format signatures must be enabled.
  • V-241957CAT IIExternal Signature Services Menu for Office must be suppressed.
  • V-241958CAT IIInclusion of document properties for PDF and XPS output must be disallowed.
  • V-241959CAT IIDocument Information panel Beaconing must show UI.
  • V-241960CAT IIOffice client polling of Sharepoint servers published links must be disabled.
  • V-241961CAT IIBlogging entries created from inside Office products must be configured for Sharepoint only.
  • V-241962CAT IIHyperlinks to web templates in File | New and task panes must be disabled.
  • V-241963CAT IIOffice Live Workspace Integration must be off.
  • V-241964CAT IIKey Usage Filtering must be allowed.
  • V-241965CAT IICustomer-submitted templates downloads from Office.com must be disallowed.
  • V-241966CAT IIEncrypt document properties must be configured for OLE documents.
  • V-241967CAT IIOnline content options must be configured for offline content availability.

Removed since V1R12 (37)

  • V-17547CAT IIActiveX control initialization must be disabled.
  • V-17560CAT IIA mix of policy and user locations for Office Products must be disallowed.
  • V-17581CAT IIBlogging entries created from inside Office products must be configured for Sharepoint only.
  • V-17583CAT IIOffice must be configured to not allow read with browsers.
  • V-17588CAT IIAccess to updates, add-ins, and patches on Office.com must be disabled.
  • V-17590CAT IITrust Bar notifications for Security messages must be enforced.
  • V-17605CAT IIDocument Information panel Beaconing must show UI.
  • V-17612CAT IIThe Customer Experience Improvement Program for Office must be disabled.
  • V-17617CAT IIThe encryption type for password protected Office 97 thru Office 2003 must be set.
  • V-17619CAT IIThe encryption type for password protected Open XML files must be set.
  • V-17627CAT IIThe Help Improve Proofing Tools feature for Office must be configured.
  • V-17659CAT IIHyperlink warnings for Office must be configured for use.
  • V-17660CAT IIInclusion of document properties for PDF and XPS output must be disallowed.
  • V-17661CAT IIThe Internet Fax Feature must be disabled.
  • V-17662CAT IIMicrosoft passport Service for content must be disallowed.
  • V-17664CAT IIThe Opt-In Wizard must be disabled.
  • V-17665CAT IIPasswords for secured documents must be enforced.
  • V-17669CAT IISmart Documents use of Manifests in Office must be disallowed.
  • V-17670CAT IIOffice client polling of Sharepoint servers published links must be disabled.
  • V-17731CAT IIConnection verification of permissions must be enforced.
  • V-17740CAT IIAutomatic receiving of small updates to improve reliability must be disallowed.
  • V-17741CAT IIAutomation Security to enforce macro level security in Office documents must be configured.
  • V-17749CAT IILegacy format signatures must be enabled.
  • V-17750CAT IILoad controls in forms3 must be disabled from loading.
  • V-17759CAT IIDocuments must be configured to not open as Read Write when browsing.
  • V-17765CAT IIChanging permissions on rights managed content for users must be enforced.
  • V-17767CAT IIUpload of document templates to Office Online must be prevented.
  • V-17768CAT IIDocument metadata for password protected files must be protected.
  • V-17769CAT IIRights managed Office Open XML files must be protected.
  • V-17773CAT IIVector markup Language (VML) for displaying graphics in browsers must be disallowed.
  • V-17805CAT IIExternal Signature Services Menu for Office must be suppressed.
  • V-26626CAT IIHyperlinks to web templates in File | New and task panes must be disabled.
  • V-26627CAT IIOffice Live Workspace Integration must be off.
  • V-26629CAT IIKey Usage Filtering must be allowed.
  • V-26630CAT IIOnline content options must be configured for offline content availability.
  • V-26631CAT IICustomer-submitted templates downloads from Office.com must be disallowed.
  • V-26704CAT IIEncrypt document properties must be configured for OLE documents.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R13 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.