What changed in Microsoft Project 2010 STIG V1R10V1R10 changes

Microsoft Project 2010 STIG V1R10 (2024-07-24) replaced V1R9 (2018-04-27): 13 checks added, 12 removed. It has 13 checks, against 12 in V1R9.

V1R10 checklistV1R9 checklist Compare V1R9 and V1R10 in STIG Compare

  • 13 added
  • 12 removed
  • 0 updated

Added in V1R10 (13)

  • V-242219CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-242220CAT IIEnabling IE Bind to Object functionality must be present.
  • V-242221CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-242222CAT IINavigation to URL's embedded in Office products must be blocked.
  • V-242223CAT IIScripted Window Security must be enforced.
  • V-242224CAT IIAdd-on Management functionality must be allowed.
  • V-242225CAT IIData Execution Prevention must be enforced.
  • V-242226CAT IILinks that invoke instances of IE from within an Office product must be blocked.
  • V-242227CAT IIFile Downloads must be configured for proper restrictions.
  • V-242228CAT IIProtection from zone elevation must be enforced.
  • V-242229CAT IIActiveX Installs must be configured for proper restriction.
  • V-242230CAT IIUntrusted intranet zone access to Project servers must not be allowed.
  • V-265896CAT IThe version of Microsoft Project running on the system must be a supported version.

Removed since V1R9 (12)

  • V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-17174CAT IIEnabling IE Bind to Object functionality must be present.
  • V-17175CAT IISaved from URL mark to assure Internet zone processing must be enforced.
  • V-17183CAT IINavigation to URL's embedded in Office products must be blocked.
  • V-17184CAT IILinks that invoke instances of IE from within an Office product must be blocked.
  • V-26584CAT IIAdd-on Management functionality must be allowed.
  • V-26585CAT IIProtection from zone elevation must be enforced.
  • V-26586CAT IIActiveX Installs must be configured for proper restriction.
  • V-26587CAT IIFile Downloads must be configured for proper restrictions.
  • V-26588CAT IIScripted Window Security must be enforced.
  • V-26590CAT IIData Execution Prevention must be enforced.
  • V-26691CAT IIUntrusted intranet zone access to Project servers must not be allowed.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R10 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.