CIS Google Chrome L2 v2.1.0

Audit Details

Name: CIS Google Chrome L2 v2.1.0

Updated: 4/12/2023

Authority: CIS

Plugin: Windows

Revision: 1.4

Estimated Item Count: 22

File Details

Filename: CIS_Google_Chrome_L2_v2.1.0.audit

Size: 45.3 kB

MD5: bcf1f69b207e3e259f1b3ae1668998b2
SHA256: 3823460923d4119df44297a77568bcf045a3b5261fa3b385d809436798bc444f

Audit Items

DescriptionCategories
1.8 Ensure 'Control SafeSites adult content filtering' is set to 'Enabled: Filter top level sites (but not embedded iframes) for adult content' specified

SYSTEM AND COMMUNICATIONS PROTECTION

2.2.2 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'

CONFIGURATION MANAGEMENT

2.2.3 Ensure 'Control use of the WebUSB API' is set to 'Enabled: Do not allow any site to request access to USB devices via the WebUSB API'

CONFIGURATION MANAGEMENT

2.2.4 Ensure 'Default notification setting' is set to 'Enabled: Do not allow any site to show desktop notifications'

CONFIGURATION MANAGEMENT

2.5.1 Ensure 'Configure native messaging blocklist' is set to 'Enabled: *'

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

2.10 Ensure 'Allow proceeding from the SSL warning page' is set to 'Disabled'

SYSTEM AND COMMUNICATIONS PROTECTION

2.14 Ensure 'Force Google SafeSearch' is set to 'Enabled'

SYSTEM AND COMMUNICATIONS PROTECTION

2.17 Ensure 'Require online OCSP/CRL checks for local trust anchors' is set to 'Enabled'

SYSTEM AND COMMUNICATIONS PROTECTION

3.1.1 Ensure 'Default cookies setting' is set to 'Enabled: Keep cookies for the duration of the session'

CONFIGURATION MANAGEMENT

3.5 Ensure 'Browser sign in settings' is set to 'Enabled: Disabled browser sign-in'

ACCESS CONTROL

3.14 Ensure 'Enable search suggestions' is set to 'Disabled'

CONFIGURATION MANAGEMENT

3.15 Ensure 'Enable Translate' is set to 'Disabled'

CONFIGURATION MANAGEMENT

4.1.1 Ensure 'Allow or deny screen capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

4.2.1 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'

CONFIGURATION MANAGEMENT

4.2.2 Ensure 'Default Sensors Setting' is set to 'Enabled: Do not allow any site to access sensors'

CONFIGURATION MANAGEMENT

4.4 Ensure 'Allow invocation of file selection dialogs' is set to 'Disabled'

CONFIGURATION MANAGEMENT

4.5 Ensure 'Allow or deny audio capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

4.6 Ensure 'Allow or deny video capture' is set to 'Disabled'

CONFIGURATION MANAGEMENT

4.8 Ensure 'Controls the mode of DNS-over-HTTPS' is set to 'Enabled: secure'
5.1 Ensure 'Enable guest mode in browser' is set to 'Disabled'

CONFIGURATION MANAGEMENT

5.2 Ensure 'Incognito mode availability ' is set to 'Enabled: Incognito mode disabled'

AUDIT AND ACCOUNTABILITY

CIS_Google_Chrome_L2_v2.1.0.audit from CIS Google Chrome Benchmark v2.1.0