V1R5 changes
Microsoft Visio 2013 STIG V1R5 (2024-07-24) replaced V1R4 (2018-04-27): 14 checks added, 13 removed. It has 14 checks, against 13 in V1R4.
V1R5 checklistV1R4 checklist Compare V1R4 and V1R5 in STIG Compare
- 14 added
- 13 removed
- 0 updated
Added in V1R5 (14)
- V-242814CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-242815CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
- V-242816CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
- V-242817CAT IINavigation to URLs embedded in Office products must be blocked.
- V-242818CAT IIScripted Window Security must be enforced.
- V-242819CAT IIAdd-on Management functionality must be allowed.
- V-242820CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-242821CAT IILinks that invoke instances of IE from within an Office product must be blocked.
- V-242822CAT IITrust Bar Notifications for unsigned applications must be disabled.
- V-242823CAT IIFile downloads must be configured for proper restrictions.
- V-242824CAT IIProtection from zone elevation must be enforced.
- V-242825CAT IIActiveX installs must be configured for proper restrictions.
- V-242826CAT IIWarning Bar settings for VBA macros must be configured.
- V-265900CAT IThe version of Visio running on the system must be a supported version.
Removed since V1R4 (13)
- V-40730CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
- V-40731CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
- V-40732CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
- V-40733CAT IINavigation to URLs embedded in Office products must be blocked.
- V-40734CAT IIScripted Window Security must be enforced.
- V-40735CAT IIAdd-on Management functionality must be allowed.
- V-40736CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-40737CAT IILinks that invoke instances of IE from within an Office product must be blocked.
- V-40738CAT IITrust Bar Notifications for unsigned applications must be disabled.
- V-40739CAT IIFile downloads must be configured for proper restrictions.
- V-40740CAT IIProtection from zone elevation must be enforced.
- V-40741CAT IIActiveX installs must be configured for proper restrictions.
- V-40742CAT IIWarning Bar settings for VBA macros must be configured.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R5 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.