1.1.1 Ensure 'Enable curtaining of remote access hosts' is set to 'Disabled'

800-53|CM-6

CSCv6|9

1.1.2 Ensure 'Allow gnubby authentication for remote access hosts' is set to 'Disabled'.

800-53|AC-6

CSCv7|9

1.1.3 Ensure 'Allow remote users to interact with elevated windows in remote assistance sessions' is set to 'Disabled'.

800-53|CM-7

CSCv7|4

1.2 Ensure 'Continue running background apps when Google Chrome is closed' is set to 'Disabled'

800-53|SC-18(3)

CSCv6|7

1.3 Ensure 'Ask where to save each file before downloading' is set to 'Enabled'

800-53|SC-18(2)

CSCv7|8

1.4 Ensure 'Disable saving browser history' is set to 'Disabled'

800-53|SC-28

1.5 Ensure 'Enable HTTP/0.9 support on non-default ports' is set to 'Disabled'

CSCv7|9.2

1.6 Ensure 'Enable component updates in Google Chrome' is set to 'Enabled'

800-53|SI-2(5)

CSCv6|4.5

CSCv7|3.4

CSCv7|3.5

1.7 Ensure 'Enable deprecated web platform features for a limited time' is set to 'Disabled'

CSCv7|7.3

1.8 Ensure 'Enable third party software injection blocking' is set to 'Enabled'

1.9  Ensure 'Extend Flash content setting to all content' is set to 'Disabled'

800-53|SC-18

CSCv7|7.2

1.10  Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'

CSCv7|2.2

1.11  Ensure 'Whether online OCSP/CRL checks are performed' is set to 'Disabled'

800-53|IA-5(2)

CSCv7|7

1.12  Ensure 'Allow WebDriver to Override Incompatible Policies' is set to 'Disabled'

1.13  Ensure 'Control SafeSites adult content filtering' is set to 'Enabled' with value 'Do not filter sites for adult content' specified

CSCv7|13

1.14  Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'

1.15  Ensure 'Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities' is set to 'Disabled'

1.16  Ensure 'Disable Certificate Transparency enforcement for a list of URLs' is set to 'Disabled'

1.17  Ensure 'Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes' is set to 'Disabled'

2.1  Ensure 'Default Flash Setting' is set to 'Enabled' (Click to Play)

CSCv6|7.2

2.5  Ensure 'Configure extension installation blacklist' is set to 'Enabled' ('*' for all extensions)

2.6  Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension', 'hosted_app', 'platform_app', 'theme' specified - 'extension'

800-53|CM-7(4)

2.6  Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension', 'hosted_app', 'platform_app', 'theme' specified - 'hosted_app'

2.6  Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension', 'hosted_app', 'platform_app', 'theme' specified - 'platform_app'

2.6  Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension', 'hosted_app', 'platform_app', 'theme' specified - 'theme'

2.8  Ensure 'Enable saving passwords to the password manager' is Configured

CSCv6|16

2.9  Ensure 'Supported authentication schemes' is set to 'Enabled' (ntlm, negotiate)

800-53|AC-17(2)

CSCv6|16.13

CSCv7|16.5

2.10  Ensure 'Choose how to specify proxy server settings' is not set to 'Enabled' with 'Auto detect proxy settings'

CSCv7|12.9

2.11 Ensure 'Allow running plugins that are outdated' is set to 'Disabled'

800-53|SI-3

CSCv6|7.1

CSCv7|7.1

2.12 Ensure 'Enable Google Cloud Print Proxy' is set to 'Disabled'

800-53|AC-20(1)

CSCv6|13

2.13 Ensure 'Enable Site Isolation for every site' is set to 'Enabled'

800-53|AC-6(4)

CSCv6|2.4

CSCv7|2.10

2.14 Ensure 'Allow download restrictions' is set to 'Enabled' with 'Block dangerous downloads' specified.

2.15 Ensure 'Disable proceeding from the Safe Browsing warning page' is set to 'Enabled'

2.16 Ensure 'Notify a user that a browser relaunch or device restart is recommended or required' is set to 'Enabled' with 'Show a recurring prompt to the user indication that a relaunch is required' specified

2.17 Ensure 'Set the time period for update notifications' is set to 'Enabled' with '86400000' (1 day) specified

2.19 Ensure 'Enable Chrome Cleanup on Windows' is Configured

CSCv7|8.1

2.21 Ensure 'Update policy override' is set to 'Enabled' with 'Always allow updates (recommended)' or 'Automatic silent updates' specified

3.2 Ensure 'Default geolocation setting' is set to 'Enabled' with 'Do not allow any site to track the users' physical location'

800-53|SC-18(1)

3.3 Ensure 'Enable Google Cast' is set to 'Disabled'

3.4 Ensure 'Block third party cookies' is set to 'Enabled'

800-53|AU-10

3.5 Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'

3.6 Ensure 'Control how Chrome Cleanup reports data to Google' is set to 'Disabled'

800-53|AU-12

3.7 Ensure 'Browser sign in settings' is set to 'Enabled' with 'Disabled browser sign-in' specified

800-53|AC-20

CSCv7|16

3.8 Ensure 'Enable Translate' is set to 'Disabled'

3.9 Ensure 'Enable network prediction' is set to 'Enabled' with 'Do not predict actions on any network connection' selected

3.10 Ensure 'Enable search suggestions' is set to 'Disabled'

3.11 Ensure 'Enable or disable spell checking web service' is set to 'Disabled'

3.12 Ensure 'Enable alternate error pages' is set to 'Disabled'

3.13 Ensure 'Disable synchronization of data with Google' is set to 'Enabled'

3.14 Ensure 'Enable Safe Browsing for trusted sources' is set to 'Disabled'

3.15 Ensure 'Enable URL-keyed anonymized data collection' is set to 'Disabled'

3.16 Ensure 'Enable deleting browser and download history' is set to 'Disabled'

4.1.1 Ensure 'Enable firewall traversal from remote access host' is set to 'Disabled'

800-53|AC-4

4.1.2 Ensure 'Enable or disable PIN-less authentication for remote access hosts' is set to 'Disabled'

800-53|IA-5(1)

4.1.3 Ensure 'Enable the use of relay servers by the remote access host' is set to 'Disabled'.

4.1.4 Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled' with a domain defined

800-53|AC-17

5.1 Ensure 'Enable submission of documents to Google Cloud print' is set to 'Disabled'

5.2 Ensure 'Import saved passwords from default browser on first run' is set to 'Disabled'

5.3 Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'

5.4 Ensure 'Enable AutoFill for addresses' is set to 'Disabled'

CIS_Google_Chrome_L1_v2.0.0.audit from CIS Google Chrome Benchmark v2.0.0

Detections

Analytics

CIS Google Chrome L1 v2.0.0

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.5 Feb 8, 2022 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.4 Jun 17, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.3 Sep 29, 2020 Miscellaneous References updated.
Revision 1.2 Jul 14, 2020 Miscellaneous Metadata updated.
Revision 1.1 Apr 23, 2020 Miscellaneous Metadata updated. References updated.