1.1.1 Ensure 'Cross-origin HTTP Authentication prompts' is set to 'Disabled'

1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'

CSCv7|7.4

1.2.2 Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Standard Protection' or higher

1.3 Ensure 'Allow Google Cast to connect to Cast devices on all IP addresses' is set to 'Disabled'

CSCv7|9.2

1.4 Ensure 'Allow queries to a Google time service' is set to 'Enabled'

CSCv7|6.1

1.5 Ensure 'Allow the audio sandbox to run' is set to 'Enabled'

1.6 Ensure 'Ask where to save each file before downloading' is set to 'Enabled'

1.7 Ensure 'Continue running background apps when Google Chrome is closed' is set to 'Disabled'

1.9 Ensure 'Determine the availability of variations' is set to 'Disabled'

CSCv7|3.5

1.10 Ensure 'Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities' is set to 'Disabled'

1.11 Ensure 'Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes' is set to 'Disabled'

1.12 Ensure 'Disable Certificate Transparency enforcement for a list of URLs' is set to 'Disabled'

1.13 Ensure 'Disable saving browser history' is set to 'Disabled'

800-53|SC-28

CSCv7|8

1.14 Ensure 'DNS interception checks enabled' is set to 'Enabled'

1.15 Ensure 'Enable component updates in Google Chrome' is set to 'Enabled'

800-53|SI-2(5)

CSCv6|4.5

1.16 Ensure 'Enable globally scoped HTTP auth cache' is set to 'Disabled'

1.17 Ensure 'Enable online OCSP/CRL checks' is set to 'Disabled'

1.18 Ensure 'Enable Renderer Code Integrity' is set to 'Enabled'

1.19 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

1.20 Ensure 'Enable third party software injection blocking' is set to 'Enabled'

800-53|CM-6

CSCv7|7.3

1.21 Ensure 'Enables managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'

1.22 Ensure 'Ephemeral profile' is set to 'Disabled'

1.23 Ensure 'Import autofill form data from default browser on first run' is set to 'Disabled'

1.24 Ensure 'Import of homepage from default browser on first run' is set to 'Disabled'

1.25 Ensure 'Import search engines from default browser on first run' is set to 'Disabled'

1.26 Ensure 'List of names that will bypass the HSTS policy check' is set to 'Disabled'

1.27 Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'

CSCv7|7

1.28 Ensure 'Suppress lookalike domain warnings on domains' is set to 'Disabled'

1.29 Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'

CSCv7|2.2

1.30 Ensure 'URLs for which local IPs are exposed in WebRTC ICE candidates' is set to 'Disabled'

2.1.1 Ensure 'Update policy override' is set to 'Enabled' with 'Always allow updates (recommended)' or 'Automatic silent updates' specified

800-53|CM-7

2.2.1 Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content'

CSCv7|7.5

2.3.1 Ensure 'Blocks external extensions from being installed' is set to 'Enabled'

CSCv7|7.2

2.3.2 Ensure 'Configure allowed app/extension types' is set to 'Enabled: extension, hosted_app, platform_app, theme' - extension

800-53|CM-7(4)

2.3.2 Ensure 'Configure allowed app/extension types' is set to 'Enabled: extension, hosted_app, platform_app, theme' - hosted_app

2.3.2 Ensure 'Configure allowed app/extension types' is set to 'Enabled: extension, hosted_app, platform_app, theme' - platform_app

2.3.2 Ensure 'Configure allowed app/extension types' is set to 'Enabled: extension, hosted_app, platform_app, theme' - theme

2.3.3 Ensure 'Configure extension installation blocklist' is set to 'Enabled: *'

2.4.1 Ensure 'Supported authentication schemes' is set to 'Enabled: ntlm, negotiate'

800-53|AC-17(2)

CSCv6|16.13

CSCv7|16.5

2.6.1 Ensure 'Enable saving passwords to the password manager' is Explicitly Configured

CSCv6|16

2.7.1 Ensure 'Enable Google Cloud Print Proxy' is set to 'Disabled'

800-53|AC-20(1)

CSCv6|13

2.8.1 Ensure 'Allow remote access connections to this machine' is set to 'Disabled'

CSCv7|12.12

2.8.2 Ensure 'Allow remote users to interact with elevated windows in remote assistance sessions' is set to 'Disabled'

2.8.3 Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined

2.8.4 Ensure 'Enable curtaining of remote access hosts' is set to 'Disabled'

2.8.5 Ensure 'Enable firewall traversal from remote access host' is set to 'Disabled'

2.8.6 Ensure 'Enable or disable PIN-less authentication for remote access hosts' is set to 'Disabled'

2.8.7 Ensure 'Enable the use of relay servers by the remote access host' is set to 'Disabled'.

2.9 Ensure 'Allow download restrictions' is set to 'Enabled: Block dangerous downloads'

800-53|SC-18(2)

2.11 Ensure 'Disable proceeding from the Safe Browsing warning page' is set to 'Enabled'

2.12 Ensure 'Enable Chrome Cleanup on Windows' is Configured

CSCv7|8.1

2.13 Ensure 'Enable Site Isolation for every site' is set to 'Enabled'

800-53|AC-6(4)

CSCv6|2.4

CSCv7|2.10

2.15 Ensure 'Notify a user that a browser relaunch or device restart is recommended or required' is set to 'Enabled: Show a recurring prompt to the user indication that a relaunch is required' specified

2.16 Ensure 'Proxy settings' is set to 'Enabled' and does not contain 'ProxyMode': 'auto_detect'

CSCv7|12.9

2.18 Ensure 'Set the time period for update notifications' is set to 'Enabled: 86400000'

3.1.2 Ensure 'Default geolocation setting' is set to 'Enabled: Do not allow any site to track the users' physical location'

800-53|SC-18(1)

CSCv7|13

3.2.1 Ensure 'Enable Google Cast' is set to 'Disabled'

CSCv6|7.2

3.3 Ensure 'Allow websites to query for available payment methods' is set to 'Disabled'

3.4 Ensure 'Block third party cookies' is set to 'Enabled'

800-53|AU-10

3.6 Ensure 'Control how Chrome Cleanup reports data to Google' is set to 'Disabled'

800-53|AU-12

3.7 Ensure 'Disable synchronization of data with Google' is set to 'Enabled'

3.8 Ensure 'Enable alternate error pages' is set to 'Disabled'

3.9 Ensure 'Enable deleting browser and download history' is set to 'Disabled'

3.10 Ensure 'Enable network prediction' is set to 'Enabled: Do not predict actions on any network connection'

3.11 Ensure 'Enable or disable spell checking web service' is set to 'Disabled'

3.12 Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'

3.13 Ensure 'Enable Safe Browsing for trusted sources' is set to 'Disabled'

3.16 Ensure 'Enable URL-keyed anonymized data collection' is set to 'Disabled'

4.3.1 Ensure 'Enable submission of documents to Google Cloud print' is set to 'Disabled'

800-53|AC-20

4.7 Ensure 'Allow user feedback' is set to 'Disabled'

4.9 Ensure 'Enable AutoFill for addresses' is set to 'Disabled'

4.10 Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'

4.11 Ensure 'Import saved passwords from default browser on first run' is set to 'Disabled'

4.12 Ensure 'List of types that should be excluded from synchronization' is set to 'Enabled: passwords'

5.3 Ensure 'Set disk cache size, in bytes' is set to 'Enabled: 250609664'

CIS_Google_Chrome_L1_v2.1.0.audit from CIS Google Chrome Benchmark v2.1.0

Detections

Analytics

CIS Google Chrome L1 v2.1.0

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.8

Miscellaneous

Revision 1.7

Miscellaneous

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Functional Update

Miscellaneous

Revision 1.1

Miscellaneous

Detections

Analytics

CIS Google Chrome L1 v2.1.0 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Functional Update

Miscellaneous

Miscellaneous

CIS Google Chrome L1 v2.1.0