Detections
Analytics

2.13.1 (L1) Ensure 'Enable Related Website Sets' Is Disabled

Information

This policy controls access to the Related Website Sets. First-party Sets are a way for sites to declare relationships with each other and enable limited cross-site cookie access for specific, user-facing purposes. It can configured to either:

 - Disabled (0): Disable Related Website Sets for all affected users
 - Enabled (1): Enable Related Website Sets for all affected users

Note: This replaces the previous recommendation of Ensure 'Enable First-Party Sets' Is Disabled.

Setting this policy will not allow sites to declare the relationships that allow them to access the cross-site cookies.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Related Website Sets Settings\Enable Related Website Sets

Impact:

This may cause unexpected behavior as a user moves between affiliated sites.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4

Plugin: Windows

Control ID: aa923e413429131a28b89a8fe9be1fa6440e5de1460f7f82bc0526e1d2f87710