DISA_STIG_SharePoint_2013_v2r3.audit from DISA Microsoft SharePoint 2013 v2r3 STIG

SP13-00-000005 - SharePoint must support the requirement to initiate a session lock after 15 minutes of system or application inactivity has transpired.

CAT|II

CCI|CCI-000057

Rule-ID|SV-223238r612235_rule

STIG-ID|SP13-00-000005

STIG-Legacy|SV-74349

STIG-Legacy|V-59919

Vuln-ID|V-223238

SP13-00-000010 - SharePoint must maintain and support the use of security attributes with stored information - 'Custom content types have been defined for Site'

CCI|CCI-000366

Rule-ID|SV-223239r612235_rule

STIG-ID|SP13-00-000010

STIG-Legacy|SV-74365

STIG-Legacy|V-59935

Vuln-ID|V-223239

SP13-00-000010 - SharePoint must maintain and support the use of security attributes with stored information - Document Library'

SP13-00-000015 - SharePoint must utilize approved cryptography to protect the confidentiality of remote access sessions.

CAT|I

CCI|CCI-000068

Rule-ID|SV-223240r612235_rule

STIG-ID|SP13-00-000015

STIG-Legacy|SV-74367

STIG-Legacy|V-59937

Vuln-ID|V-223240

SP13-00-000020 - SharePoint must use cryptography to protect the integrity of the remote access session.

CCI|CCI-001453

Rule-ID|SV-223241r612235_rule

STIG-ID|SP13-00-000020

STIG-Legacy|SV-74369

STIG-Legacy|V-59939

Vuln-ID|V-223241

SP13-00-000025 - SharePoint must ensure remote sessions for accessing security functions and security-relevant information are audited.

CCI|CCI-000067

Rule-ID|SV-223242r612235_rule

STIG-ID|SP13-00-000025

STIG-Legacy|SV-74371

STIG-Legacy|V-59941

Vuln-ID|V-223242

SP13-00-000030 - SharePoint must enforce approved authorizations for controlling the flow of information between interconnected systems in accordance with applicable policy.

CCI|CCI-001414

Rule-ID|SV-223243r612235_rule

STIG-ID|SP13-00-000030

STIG-Legacy|SV-74373

STIG-Legacy|V-59943

Vuln-ID|V-223243

SP13-00-000035 - SharePoint must identify data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied.

Rule-ID|SV-223244r612235_rule

STIG-ID|SP13-00-000035

STIG-Legacy|SV-74375

STIG-Legacy|V-59945

Vuln-ID|V-223244

SP13-00-000040 - SharePoint must provide the ability to prohibit the transfer of unsanctioned information in accordance with security policy.

CCI|CCI-001374

Rule-ID|SV-223245r612235_rule

STIG-ID|SP13-00-000040

STIG-Legacy|SV-74377

STIG-Legacy|V-59947

Vuln-ID|V-223245

SP13-00-000045 - SharePoint must display an approved system use notification message or banner before granting access to the system.

CCI|CCI-000048

Rule-ID|SV-223246r612235_rule

STIG-ID|SP13-00-000045

STIG-Legacy|SV-74379

STIG-Legacy|V-59949

Vuln-ID|V-223246

SP13-00-000055 - SharePoint must allow designated organizational personnel to select which auditable events are to be audited by specific components of the system.

CCI|CCI-000171

Rule-ID|SV-223247r612235_rule

STIG-ID|SP13-00-000055

STIG-Legacy|SV-74383

STIG-Legacy|V-59953

Vuln-ID|V-223247

SP13-00-000060 - SharePoint must reject or delay, as defined by the organization, network traffic generated above configurable traffic volume thresholds - ConnectionTimeout

Rule-ID|SV-223248r612235_rule

STIG-ID|SP13-00-000060

STIG-Legacy|SV-74385

STIG-Legacy|V-59955

Vuln-ID|V-223248

SP13-00-000060 - SharePoint must reject or delay, as defined by the organization, network traffic generated above configurable traffic volume thresholds - maxBandwidth

SP13-00-000060 - SharePoint must reject or delay, as defined by the organization, network traffic generated above configurable traffic volume thresholds - maxConnections

SP13-00-000065 - SharePoint must prevent the execution of prohibited mobile code.

CCI|CCI-001695

Rule-ID|SV-223249r612235_rule

STIG-ID|SP13-00-000065

STIG-Legacy|SV-74387

STIG-Legacy|V-59957

Vuln-ID|V-223249

SP13-00-000075 - SharePoint must use replay-resistant authentication mechanisms for network access to privileged accounts.

CCI|CCI-001941

Rule-ID|SV-223250r612235_rule

STIG-ID|SP13-00-000075

STIG-Legacy|SV-74391

STIG-Legacy|V-59961

Vuln-ID|V-223250

SP13-00-000080 - SharePoint must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

CCI|CCI-000804

Rule-ID|SV-223251r612235_rule

STIG-ID|SP13-00-000080

STIG-Legacy|SV-74393

STIG-Legacy|V-59963

Vuln-ID|V-223251

SP13-00-000085 - SharePoint must implement required cryptographic protections using cryptographic modules complying with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

CCI|CCI-000803

Rule-ID|SV-223252r821359_rule

STIG-ID|SP13-00-000085

STIG-Legacy|SV-74395

STIG-Legacy|V-59965

Vuln-ID|V-223252

SP13-00-000095 - SharePoint must employ NSA-approved cryptography to protect classified information.

CCI|CCI-002450

Rule-ID|SV-223254r821362_rule

STIG-ID|SP13-00-000095

STIG-Legacy|SV-74399

STIG-Legacy|V-59969

Vuln-ID|V-223254

SP13-00-000100 - SharePoint must employ FIPS-validated cryptography to protect unclassified information when such information must be separated from individuals who have the necessary clearances yet lack the necessary access approvals.

Rule-ID|SV-223255r821365_rule

STIG-ID|SP13-00-000100

STIG-Legacy|SV-74401

STIG-Legacy|V-59971

Vuln-ID|V-223255

SP13-00-000105 - SharePoint must validate the integrity of security attributes exchanged between systems.

CCI|CCI-001158

Rule-ID|SV-223277r612235_rule

STIG-ID|SP13-00-000105

STIG-Legacy|SV-74403

STIG-Legacy|V-59973

Vuln-ID|V-223277

SP13-00-000110 - SharePoint must ensure authentication of both client and server during the entire session. An example of this is SSL Mutual Authentication.

CCI|CCI-001184

Rule-ID|SV-223257r612235_rule

STIG-ID|SP13-00-000110

STIG-Legacy|SV-74405

STIG-Legacy|V-59975

Vuln-ID|V-223257

SP13-00-000115 - SharePoint must terminate user sessions upon user logoff, and when idle time limit is exceeded.

CCI|CCI-001185

Rule-ID|SV-223258r612235_rule

STIG-ID|SP13-00-000115

STIG-Legacy|SV-74407

STIG-Legacy|V-59977

Vuln-ID|V-223258

SP13-00-000120 - SharePoint must maintain the confidentiality of information during aggregation, packaging, and transformation in preparation for transmission. When transmitting data, applications need to leverage transmission protection mechanisms such as TLS, SSL VPNs, or IPSec.

CCI|CCI-002420

Rule-ID|SV-223259r612235_rule

STIG-ID|SP13-00-000120

STIG-Legacy|SV-74409

STIG-Legacy|V-59979

Vuln-ID|V-223259

SP13-00-000125 - SharePoint must implement an information system isolation boundary that minimizes the number of nonsecurity functions included within the boundary containing security functions.

Rule-ID|SV-223260r612235_rule

STIG-ID|SP13-00-000125

STIG-Legacy|SV-74411

STIG-Legacy|V-59981

Vuln-ID|V-223260

SP13-00-000130 - SharePoint must implement security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.

CCI|CCI-001089

Rule-ID|SV-223261r612235_rule

STIG-ID|SP13-00-000130

STIG-Legacy|SV-74413

STIG-Legacy|V-59983

Vuln-ID|V-223261

SP13-00-000135 - SharePoint must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission, unless the transmitted data is otherwise protected by alternative physical measures.

CCI|CCI-002421

Rule-ID|SV-223262r612235_rule

STIG-ID|SP13-00-000135

STIG-Legacy|SV-74415

STIG-Legacy|V-59985

Vuln-ID|V-223262

SP13-00-000140 - SharePoint must prevent non-privileged users from circumventing malicious code protection capabilities.

CCI|CCI-002235

Rule-ID|SV-223263r612235_rule

STIG-ID|SP13-00-000140

STIG-Legacy|SV-74417

STIG-Legacy|V-59987

Vuln-ID|V-223263

SP13-00-000145 - SharePoint must use mechanisms for authentication to a cryptographic module that meet the requirements of applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Rule-ID|SV-223264r821368_rule

STIG-ID|SP13-00-000145

STIG-Legacy|SV-74419

STIG-Legacy|V-59989

Vuln-ID|V-223264

SP13-00-000150 - The SharePoint Central Administration site must not be accessible from Extranet or Internet connections.

CCI|CCI-001083

Rule-ID|SV-223265r612235_rule

STIG-ID|SP13-00-000150

STIG-Legacy|SV-74423

STIG-Legacy|V-59993

Vuln-ID|V-223265

SP13-00-000155 - For environments requiring an Internet-facing capability, the SharePoint application server upon which Central Administration is installed, must not be installed in the DMZ.

Rule-ID|SV-223266r612235_rule

STIG-ID|SP13-00-000155

STIG-Legacy|SV-74425

STIG-Legacy|V-59995

Vuln-ID|V-223266

SP13-00-000160 - The SharePoint farm service account (database access account)  must be configured with minimum privileges in Active Directory (AD).

Rule-ID|SV-223267r612235_rule

STIG-ID|SP13-00-000160

STIG-Legacy|SV-74427

STIG-Legacy|V-59997

Detections

Analytics

DISA STIG SharePoint 2013 v2r3

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous


Revision 1.6 May 5, 2025 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.5 Jan 6, 2025 Miscellaneous Metadata updated. References updated.
Revision 1.4 Apr 12, 2023 Miscellaneous Metadata updated.
Revision 1.3 Mar 7, 2023 Miscellaneous Metadata updated. References updated.
Revision 1.2 Dec 15, 2022 Miscellaneous Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.0 May 27, 2022 Miscellaneous Metadata updated.

Detections

Analytics

DISA STIG SharePoint 2013 v2r3 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous

DISA STIG SharePoint 2013 v2r3