| 1.1.4.1.1 Ensure 'Add-on Management' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.2 Ensure 'Bind to object' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.3 Ensure 'Consistent Mime Handling' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.1.4.1.4 Ensure 'Disable user name and password' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.1.4.1.5 Ensure 'Information Bar' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.6 Ensure 'Local Machine Zone Lockdown Security' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.1.4.1.7 Ensure 'Mime Sniffing Safety Feature' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.1.4.1.8 Ensure 'Navigate URL' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.9 Ensure 'Object Caching Protection' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.1.4.1.10 Ensure 'Protection From Zone Elevation' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.1.4.1.11 Ensure 'Restrict ActiveX Install' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.12 Ensure 'Restrict File Download' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.1.4.1.13 Ensure 'Saved from URL' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.4.1.14 Ensure 'Scripted Window Security Restrictions' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.1.5.1 Ensure 'Enable Automatic Updates' is set to 'Enabled' | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.1.5.2 Ensure 'Hide option to enable or disable updates' is set to 'Enabled' | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.3.1 Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' | CONFIGURATION MANAGEMENT |
| 1.3.2 Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 2.1.1.3.2.1.1 Ensure 'Allow Trusted Locations on the network' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.1.1.3.2.2 Ensure 'Block macros from running in Office files from the internet' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 2.1.1.3.2.3 Ensure 'Disable Trust Bar Notification for unsigned application add-ins and block them' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 2.1.1.3.2.4 Ensure 'Require that application add-ins are signed by Trusted Publisher' is set to 'Enabled' | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| 2.1.1.4.1.1 Ensure 'Underline hyperlinks' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 2.1.4.1 Ensure 'Default file format' is set to 'Enabled: Access 2007' | CONFIGURATION MANAGEMENT |
| 2.1.4.2 Ensure 'Do not prompt to convert older databases' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.1.5.1 Ensure 'Modal Trust Decision Only' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.2.2.1 Ensure 'Do not show data extraction options when opening corrupt workbooks' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2.4.1.1.1.1 Ensure 'Load Pictures from Web pages not created in Excel' is set to 'Disabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2.4.1.2 Ensure 'Ask to update automatic links' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 2.2.4.5.1.1 Ensure 'Internet and network paths as hyperlinks' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.2.4.6.1 Ensure 'Default file format' is set to 'Enabled: Excel Workbook (*.xlsx)' | CONFIGURATION MANAGEMENT |
| 2.2.4.6.2 Ensure 'Disable AutoRepublish' is set to 'Enabled' | ACCESS CONTROL |
| 2.2.4.6.3 Ensure 'Do not show AutoRepublish warning alert' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.2.4.7.2.1.1 Ensure 'Always prevent untrusted Microsoft Query files from opening' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2.4.7.2.1.2 Ensure 'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2.4.7.2.1.3 Ensure 'Don't allow Dynamic Data Exchange (DDE) server lookup in Excel' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2.4.7.2.2.1 Ensure 'dBase III /IV files' is set to 'Enable: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.2 Ensure 'Dif and Sylk files' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.3 Ensure 'Excel 2 macrosheets and add-in files' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.4 Ensure 'Excel 2 worksheets' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.5 Ensure 'Excel 3 macrosheets and add-in files' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.6 Ensure 'Excel 3 worksheets' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.7 Ensure 'Excel 4 macrosheets and add-in files' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.8 Ensure 'Excel 4 workbooks' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.9 Ensure 'Excel 4 worksheets' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.10 Ensure 'Excel 95 workbooks' is set to 'Enabled: Open/Save Blocked, Use Open Policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.11 Ensure 'Excel 95-97 workbooks and templates' is set to 'Enabled: Open/Save Blocked, Use Open Policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.12 Ensure 'Excel 97-2003 workbooks and templates' is set to 'Enabled: Open/Save Blocked, Use Open Policy' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.13 Ensure 'Set default file block behavior' is set to 'Enabled: Blocked files are not opened' | SYSTEM AND INFORMATION INTEGRITY |
| 2.2.4.7.2.2.14 Ensure 'Web pages and Excel 2003 XML spreadsheets' is set to 'Enabled: Open/Save blocked, use open policy' | SYSTEM AND INFORMATION INTEGRITY |
