Detections
Analytics

DISA STIG Microsoft Office 365 ProPlus v3r4

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA STIG Microsoft Office 365 ProPlus v3r4

Updated: 4/24/2026

Authority: DISA STIG

Plugin: Windows

Revision: 1.1

Estimated Item Count: 144

File Details

Filename: DISA_STIG_Microsoft_Office_365_ProPlus_v3r4.audit

Size: 373 kB

MD5: 80387ff65f7285fcbdc9db9883e6f740
SHA256: b7ddabc67a86b0f9dcef2aac947ca35b38f942a75cecb486b25afeca8e17b3e0

Audit Items

DescriptionCategories
DISA_STIG_Microsoft_Office_365_ProPlus_v3r4.audit from DISA Microsoft Office 365 ProPlus v3r4 STIG
O365-AC-000001 - Macros must be blocked from running in Access files from the Internet.
O365-AC-000002 - Trust Bar Notifications for unsigned application add-ins in Access must be disabled and blocked.
O365-AC-000003 - VBA macros not digitally signed must be blocked in Access.
O365-CO-000001 - The Macro Runtime Scan Scope must be enabled for all documents.
O365-CO-000002 - Document metadata for rights managed Office Open XML files must be protected.
O365-CO-000003 - The Office client must be prevented from polling the SharePoint Server for published links.
O365-CO-000004 - Custom user interface (UI) code must be blocked from loading in all Office applications.
O365-CO-000005 - ActiveX Controls must be initialized in Safe Mode.
O365-CO-000006 - Macros in all Office applications that are opened programmatically by another application must be opened based upon macro security level.
O365-CO-000007 - Trust Bar notifications must be configured to display information in the Message Bar about the content that has been automatically blocked.
O365-CO-000008 - Office applications must be configured to specify encryption type in password-protected Office 97-2003 files.
O365-CO-000009 - Office applications must be configured to specify encryption type in password-protected Office Open XML files.
O365-CO-000010 - Users must be prevented from creating new trusted locations in the Trust Center.
O365-CO-000012 - Office applications must not load XML expansion packs with Smart Documents.
O365-CO-000013 - The load of controls in Forms3 must be blocked.
O365-CO-000014 - Add-on Management must be enabled for all Office 365 ProPlus programs.
O365-CO-000015 - Consistent MIME handling must be enabled for all Office 365 ProPlus programs.
O365-CO-000016 - User name and password must be disabled in all Office programs.
O365-CO-000017 - The Information Bar must be enabled in all Office programs.
O365-CO-000018 - The Local Machine Zone Lockdown Security must be enabled in all Office programs.
O365-CO-000019 - The MIME Sniffing safety feature must be enabled in all Office programs.
O365-CO-000020 - Navigate URL must be enabled in all Office programs.
O365-CO-000021 - Object Caching Protection must be enabled in all Office programs.
O365-CO-000022 - Protection from zone elevation must be enabled in all Office programs.
O365-CO-000023 - ActiveX installation restriction must be enabled in all Office programs.
O365-CO-000024 - File Download Restriction must be enabled in all Office programs.
O365-CO-000025 - The Save from URL feature must be enabled in all Office programs.
O365-CO-000026 - Scripted Windows Security restrictions must be enabled in all Office programs.
O365-CO-000027 - Flash player activation must be disabled in all Office programs.
O365-CO-000028 - Sending of diagnostic data to Microsoft must be disabled.
O365-CO-000029 - Connected experiences that analyze content must be disabled.
O365-CO-000030 - Connected experiences that download online content must be disabled.
O365-CO-000031 - Additional optional connected experiences must be disabled.
O365-CO-000032 - Connected experiences must be disabled.
O365-EX-000001 - Trusted Locations on the network must be disabled in Excel.
O365-EX-000002 - VBA Macros not digitally signed must be blocked in Excel.
O365-EX-000003 - Dynamic Data Exchange (DDE) server launch in Excel must be blocked.
O365-EX-000004 - Dynamic Data Exchange (DDE) server lookup in Excel must be blocked.
O365-EX-000005 - Open/save of dBase III / IV format files must be blocked.
O365-EX-000006 - Open/save of Dif and Sylk format files must be blocked.
O365-EX-000007 - Open/save of Excel 2 macrosheets and add-in files must be blocked.
O365-EX-000008 - Open/save of Excel 2 worksheets must be blocked.
O365-EX-000009 - Open/save of Excel 3 macrosheets and add-in files must be blocked.
O365-EX-000010 - Open/save of Excel 3 worksheets must be blocked.
O365-EX-000011 - Open/save of Excel 4 macrosheets and add-in files must be blocked.
O365-EX-000012 - Open/save of Excel 4 workbooks must be blocked.
O365-EX-000013 - Open/save of Excel 4 worksheets must be blocked.
O365-EX-000014 - Open/save of Excel 95 workbooks must be blocked.
O365-EX-000015 - Open/save of Excel 95-97 workbooks and templates must be blocked.