5.4 Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'

Information

Windows service for application access to downloaded maps. This service is started on-demand by application accessing downloaded maps.

Rationale:

Mapping technologies can unwillingly reveal your location to attackers and other software that picks up the information. In addition, automatic downloads of data from 3rd-party sources should be minimized when not needed. Therefore this service should not be needed in high security environments.

Impact:

Applications will be prevented from accessing maps data.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Downloaded Maps Manager

Default Value:

Automatic (Delayed Start)

See Also

https://workbench.cisecurity.org/files/3714

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CSCv6|9.1, CSCv7|9.2

Plugin: Windows

Control ID: ba7632b06f7cdfea8adc8c4ad26d70f0acff027ab83349c9ed1682097306d1ad