DISA STIG Microsoft Project 2016 v1r1

Audit Details

Name: DISA STIG Microsoft Project 2016 v1r1

Updated: 4/12/2023

Authority: DISA STIG

Plugin: Windows

Revision: 1.13

Estimated Item Count: 15

File Details

Filename: DISA_STIG_Microsoft_Project_2016_v1r1.audit

Size: 32.1 kB

MD5: bcfa1b043bcef229ed2529f0bafbdb1f
SHA256: 0fa06915a901095889578d46d2864862668012a517a1c708b8b24aa27d9e4b1a

Audit Items

DescriptionCategories
DISA_STIG_Microsoft_Project_2016_v1r1.audit for Microsoft Project 2016, from DISA STIG Microsoft Project 2016 v1r1
DTOO104 - Disabling of user name and password syntax from being used in URLs must be enforced.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO111 - Enabling IE Bind to Object functionality must be present.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO117 - Saved from URL mark to assure Internet zone processing must be enforced.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO123 - Navigation to URLs embedded in Office products must be blocked.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO124 - Scripted Window Security must be enforced.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO126 - Add-on Management functionality must be allowed.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO127 - Add-ins to Office applications must be signed by a Trusted Publisher.

CONFIGURATION MANAGEMENT

DTOO129 - Links that invoke instances of Internet Explorer from within an Office product must be blocked.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO131 - Trust Bar Notifications for unsigned application add-ins must be blocked.

CONFIGURATION MANAGEMENT

DTOO132 - File Downloads must be configured for proper restrictions.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO209 - Protection from zone elevation must be enforced.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO211 - ActiveX Installs must be configured for proper restriction.

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO304 - Warning Bar settings for VBA macros must be configured.

CONFIGURATION MANAGEMENT

DTOO346 - Untrusted intranet zone access to Project servers must not be allowed.

SYSTEM AND COMMUNICATIONS PROTECTION