CCI|CCI-001166

Title

The information system identifies organization-defined unacceptable mobile code.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
ARDC-CL-000005 - Adobe Reader DC must enable Enhanced Security in a Standalone Application.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000010 - Adobe Reader DC must enable Enhanced Security in a Browser.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000015 - Adobe Reader DC must enable Protected Mode.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000020 - Adobe Reader DC must enable Protected View.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000025 - Adobe Reader DC must Block Websites.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000030 - Adobe Reader DC must block access to Unknown Websites.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000035 - Adobe Reader DC must prevent opening files other than PDF or FDF.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CL-000045 - Adobe Reader DC must block Flash Content.WindowsDISA STIG Adobe Acrobat Reader DC Classic Track v2r1
ARDC-CN-000005 - Adobe Reader DC must enable Enhanced Security in a Standalone Application.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000010 - Adobe Reader DC must enable Enhanced Security in a Browser.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000015 - Adobe Reader DC must enable Protected Mode.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000020 - Adobe Reader DC must enable Protected View.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000025 - Adobe Reader DC must Block Websites.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000030 - Adobe Reader DC must block access to Unknown Websites.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000035 - Adobe Reader DC must prevent opening files other than PDF or FDF.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
ARDC-CN-000045 - Adobe Reader DC must block Flash Content.WindowsDISA STIG Adobe Acrobat Reader DC Continuous Track v2r1
AS24-U2-000030 - The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are providedUnixDISA STIG Apache Server 2.4 Unix Site v2r4 Middleware
AS24-U2-000030 - The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are providedUnixDISA STIG Apache Server 2.4 Unix Site v2r4
AS24-W2-000890 - An Apache web server must maintain the confidentiality of controlled information during transmission through the use of an approved TLS version - SSLEngineWindowsDISA STIG Apache Server 2.4 Windows Site v2r1
AS24-W2-000890 - An Apache web server must maintain the confidentiality of controlled information during transmission through the use of an approved TLS version - SSLProtocolWindowsDISA STIG Apache Server 2.4 Windows Site v2r1
DTBC-0002 - Site tracking users location must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0038 - Safe Browsing must be enabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0057 - Safe Browsing Extended Reporting must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0066 - Anonymized data collection must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0067 - Collection of WebRTC event logs must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0069 - Guest Mode must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0070 - AutoFill for credit cards must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0071 - AutoFill for addresses must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBC-0072 - Import AutoFill form data must be disabled.WindowsDISA STIG Google Chrome v2r9
DTBI590-IE11 - Internet Explorer Processes for MIME handling must be enforced. (Reserved)WindowsDISA STIG IE 11 v2r4
DTBI592-IE11 - Internet Explorer Processes for MIME handling must be enforced (Explorer).WindowsDISA STIG IE 11 v2r4
DTBI594-IE11 - Internet Explorer Processes for MIME handling must be enforced (iexplore).WindowsDISA STIG IE 11 v2r4
DTBI595-IE11 - Internet Explorer Processes for MIME sniffing must be enforced (Reserved).WindowsDISA STIG IE 11 v2r4
DTBI596-IE11 - Internet Explorer Processes for MIME sniffing must be enforced (Explorer).WindowsDISA STIG IE 11 v2r4
DTBI597-IE11 - Internet Explorer Processes for MIME sniffing must be enforced (iexplore).WindowsDISA STIG IE 11 v2r4
DTBI740-IE11 - Managing SmartScreen Filter use must be enforced.WindowsDISA STIG IE 11 v2r4
IIST-SV-000130 - Java software installed on a production IIS 10.0 web server must be limited to .class files and the Java Virtual Machine.WindowsDISA IIS 10.0 Server v2r10
IISW-SV-000130 - Java software installed on a production IIS 8.5 web server must be limited to .class files and the Java Virtual Machine.WindowsDISA IIS 8.5 Server v2r7
JUSX-IP-000008 - The Juniper Networks SRX Series Gateway IDPS must detect, at a minimum, mobile code that is unsigned or exhibiting unusual behavior, has not undergone a risk assessment, or is prohibited for use based on a risk assessment.JuniperDISA Juniper SRX Services Gateway IDPS v1r2
OH12-1X-000265 - OHS utilizing mobile code must meet DoD-defined mobile code requirements.UnixDISA STIG Oracle HTTP Server 12.1.3 v2r2