3.12 Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'

Information

This setting controls anonymous reporting of usage and crash-related data about Google Chrome to Google.

The recommended state for this setting is: Disabled (0)

NOTE: This setting is not available on Windows instances that are not joined to a Microsoft Active Directory domain.

Rationale:

Anonymous crash/usage data can be used to identify people, companies and information, which can be considered data ex-filtration from company systems.

Impact:

If this setting is disabled, this information is not sent to Google.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled:

Computer Configuration\Administrative Templates\Google\Google Chrome\Enable reporting of usage and crash-related data

Default Value:

Unset (Same as Enabled, but user can change)

See Also

https://workbench.cisecurity.org/files/3653

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CSCv6|13

Plugin: Windows

Control ID: e30081f1ff40b0acc1be4bc1edd240eb0cd7ee37ecc923135da61cab4fb0fc11