What changed in Microsoft Word 2013 STIG V1R7V1R7 changes

Microsoft Word 2013 STIG V1R7 (2024-07-24) replaced V1R6 (2018-04-27): 36 checks added, 35 removed. It has 36 checks, against 35 in V1R6.

V1R7 checklistV1R6 checklist Compare V1R6 and V1R7 in STIG Compare

  • 36 added
  • 35 removed
  • 0 updated

Added in V1R7 (36)

  • V-242827CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-242828CAT IIBlocking as default file block opening behavior must be enforced.
  • V-242829CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-242830CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-242831CAT IIConfiguration for file validation must be enforced.
  • V-242832CAT IIFiles from the Internet zone must be opened in Protected View.
  • V-242833CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-242834CAT IIScripted Window Security must be enforced.
  • V-242835CAT IIAdd-on Management functionality must be allowed.
  • V-242836CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-242837CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-242838CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-242839CAT IIFile Downloads must be configured for proper restrictions.
  • V-242840CAT IIAll automatic loading from trusted locations must be disabled.
  • V-242841CAT IIDisallowance of trusted locations on the network must be enforced.
  • V-242842CAT IIThe Save commands default file format must be configured.
  • V-242843CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
  • V-242844CAT IITrust access for VBA must be disallowed.
  • V-242845CAT IIProtection from zone elevation must be enforced.
  • V-242846CAT IIActiveX Installs must be configured for proper restriction.
  • V-242847CAT IIFiles in unsafe locations must be opened in Protected View.
  • V-242848CAT IIDocument behavior if file validation fails must be set.
  • V-242849CAT IIAttachments opened from Outlook must be in Protected View.
  • V-242850CAT IIThe automatically update links feature must be disabled.
  • V-242851CAT IIA warning before printing that the document contains tracking changes must be provided.
  • V-242852CAT IIWarning Bar settings for VBA macros must be configured.
  • V-242853CAT IIOnline translation dictionaries must not be used.
  • V-242854CAT IIWord 2 and earlier binary documents and templates must be blocked for open/save.
  • V-242855CAT IIWord 2000 binary documents and templates must be configured to edit in protected view.
  • V-242856CAT IIWord 6.0 binary documents and templates must be configured for block open/save actions.
  • V-242857CAT IIWord 95 binary documents and templates must be configured to edit in protected view.
  • V-242858CAT IIWord 97 binary documents and templates must be configured to edit in protected view.
  • V-242859CAT IIWord XP binary documents and templates must be configured to edit in protected view.
  • V-242860CAT IIWord must be configured to warn when opening a document with custom XML markup.
  • V-242861CAT IIMacros must be blocked from running in Office 2013 files from the Internet.
  • V-265902CAT IThe version of Microsoft Word running on the system must be a supported version.

Removed since V1R6 (35)

  • V-17173CAT IIDisabling of user name and password syntax from being used in URLs must be enforced.
  • V-17174CAT IIThe Internet Explorer Bind to Object functionality must be enabled.
  • V-17175CAT IIThe Saved from URL mark must be selected to enforce Internet zone processing.
  • V-17183CAT IINavigation to URLs embedded in Office products must be blocked.
  • V-17184CAT IILinks that invoke instances of Internet Explorer from within an Office product must be blocked.
  • V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
  • V-17471CAT IIAll automatic loading from trusted locations must be disabled.
  • V-17473CAT IIForce encrypted macros to be scanned in open XML documents must be determined and configured.
  • V-17520CAT IIDisallowance of trusted locations on the network must be enforced.
  • V-17521CAT IIThe Save commands default file format must be configured.
  • V-17522CAT IITrust access for VBA must be disallowed.
  • V-17545CAT IIWarning Bar settings for VBA macros must be configured.
  • V-17811CAT IIThe automatically update links feature must be disabled.
  • V-17813CAT IIA warning before printing that the document contains tracking changes must be provided.
  • V-26584CAT IIAdd-on Management functionality must be allowed.
  • V-26585CAT IIProtection from zone elevation must be enforced.
  • V-26586CAT IIActiveX Installs must be configured for proper restriction.
  • V-26587CAT IIFile Downloads must be configured for proper restrictions.
  • V-26588CAT IIScripted Window Security must be enforced.
  • V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
  • V-26592CAT IIConfiguration for file validation must be enforced.
  • V-26612CAT IIBlocking as default file block opening behavior must be enforced.
  • V-26614CAT IIFiles from the Internet zone must be opened in Protected View.
  • V-26615CAT IIFiles in unsafe locations must be opened in Protected View.
  • V-26616CAT IIDocument behavior if file validation fails must be set.
  • V-26617CAT IIAttachments opened from Outlook must be in Protected View.
  • V-26648CAT IIOnline translation dictionaries must not be used.
  • V-26653CAT IIWord 2 and earlier binary documents and templates must be blocked for open/save.
  • V-26654CAT IIWord 2000 binary documents and templates must be configured to edit in protected view.
  • V-26656CAT IIWord 6.0 binary documents and templates must be configured for block open/save actions.
  • V-26657CAT IIWord 95 binary documents and templates must be configured to edit in protected view.
  • V-26658CAT IIWord 97 binary documents and templates must be configured to edit in protected view.
  • V-26659CAT IIWord XP binary documents and templates must be configured to edit in protected view.
  • V-41147CAT IIWord must be configured to warn when opening a document with custom XML markup.
  • V-72829CAT IIMacros must be blocked from running in Office 2013 files from the Internet.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R7 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.