Detections
Analytics

800-53|SC-18

Title

MOBILE CODE

Description

The organization:

Supplemental

Decisions regarding the employment of mobile code within organizational information systems are based on the potential for the code to cause damage to the systems if used maliciously. Mobile code technologies include, for example, Java, JavaScript, ActiveX, Postscript, PDF, Shockwave movies, Flash animations, and VBScript. Usage restrictions and implementation guidance apply to both the selection and use of mobile code installed on servers and mobile code downloaded and executed on individual workstations and devices (e.g., smart phones). Mobile code policy and procedures address preventing the development, acquisition, or introduction of unacceptable mobile code within organizational information systems.

Reference Item Details

Related: AU-12,AU-2,CM-2,CM-6,SI-3

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Priority: P2

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 (L1) Ensure 'Open 'safe' files after downloading' is 'Disabled'UnixCIS MacOS Safari v2.0.0 L1
1.1 O365-AC-000001WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.1 Set 'Allow software to run or install even if the signature is invalid' to 'Disabled'WindowsCIS IE 9 v1.0.0
1.1.1.1 (L1) Ensure 'Allow add-on installs from websites' is set to 'Disabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.1.3.2.3 Ensure 'VBA Macro Notification Settings' is set to Enabled (Disable all Except Digitally Signed Macros)WindowsCIS Microsoft Office Access 2016 v1.0.1
1.1.3.2.3 Ensure 'VBA Macro Notification Settings' is set to Enabled (Disable all Except Digitally Signed Macros)WindowsCIS Microsoft Office Access 2013 v1.0.1
1.1.3.2.4 Ensure Set 'Disable Trust Bar Notification for unsigned application add-ins ' is set to EnabledWindowsCIS Microsoft Office Access 2016 v1.0.1
1.1.3.2.4 Ensure Set 'Disable Trust Bar Notification for unsigned application add-ins' is set to EnabledWindowsCIS Microsoft Office Access 2013 v1.0.1
1.1.4.1.1 Ensure 'Add-on Management' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
1.1.4.1.2 Ensure 'Bind to object' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
1.1.4.1.5 Ensure 'Information Bar' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
1.1.4.1.11 Ensure 'Restrict ActiveX Install' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
1.1.4.1.14 Ensure 'Scripted Window Security Restrictions' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
1.1.5.1 Ensure 'Automatically download attachments' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.1.5.1 Ensure 'Automatically download attachments' is set to DisabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.1.12.1 (L1) Ensure 'Activate Flash on websites' is set to 'Disabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.1.18.7 (L1) Ensure 'extensions.blocklist.enabled' is set to 'Enabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.1.23.1 (L1) Ensure 'Extension Recommendations' is set to 'Disabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.10 Set 'Block Trusted Zones' to 'Enabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.10.2 (L2) Ensure 'Configure extension management settings' is set to 'Enabled: { '*': {'installation_mode': 'blocked' }}'WindowsCIS Microsoft Edge v4.0.0 L2
1.10.2 (L2) Ensure 'Configure extension management settings' is set to 'Enabled: { '*': {'installation_mode': 'blocked' }}'WindowsCIS Microsoft Intune for Edge v1.0.0 L2
1.13 Set 'Display pictures and external content in HTML e- mail' to 'Enabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.13.1.1 Ensure 'Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.101 O365-PT-000002WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.102 O365-PT-000003WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.103 O365-PT-000004WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.104 O365-PT-000005WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.105 O365-PT-000006WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.106 O365-PT-000007WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.107 (L1) Ensure 'Enable upload files from mobile in Microsoft Edge desktop' is set to 'Disabled'WindowsCIS Microsoft Intune for Edge v1.0.0 L1
1.108 (L1) Ensure 'Enable upload files from mobile in Microsoft Edge desktop' is set to 'Disabled'WindowsCIS Microsoft Edge v4.0.0 L1
1.108 O365-PT-000009WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.109 O365-PT-000010WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.110 O365-PT-000011WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.111 O365-PT-000012WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.112 O365-PT-000013WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.113 O365-PU-000001WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.117 O365-VI-000002WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.119 O365-VI-000004WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.120 O365-VI-000005WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.121 O365-VI-000006WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.122 O365-VI-000007WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.124 O365-WD-000002WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.125 O365-WD-000003WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.126 (L1) Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Intune for Edge v1.0.0 L1
1.126 O365-WD-000004WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.127 (L1) Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge v4.0.0 L1
1.127 O365-WD-000005WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.128 O365-WD-000006WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II
1.129 O365-WD-000007WindowsCIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II