DISA_STIG_Microsoft_Office_365_ProPlus_v2r3.audit from DISA Microsoft Office 365 ProPlus v2r3 STIG
O365-AC-000004 - Allowing Trusted Locations on the network must be disabled in Access.
O365-CO-000005 - ActiveX Controls must be initialized in Safe Mode.
O365-CO-000007 - Trust Bar notifications must be configured to display information in the Message Bar about the content that has been automatically blocked.
O365-EX-000033 - Files failing file validation must be opened in Excel in Protected view mode and disallow edits.
O365-PT-000012 - If file validation fails, files must be opened in Protected view in PowerPoint with ability to edit disabled.
O365-WD-000005 - If file validation fails, files must be opened in Protected view in Word with ability to edit disabled.
Informational Update
O365-EX-000033 - Files failing file validation must be opened in Excel in Protected view mode and disallow edits.