3.12 Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'

Information

This setting controls anonymous reporting of usage and crash-related data about Google Chrome to Google.

The recommended state for this setting is: Disabled (0)

NOTE: This setting is not available on Windows instances that are not joined to a Microsoft Active Directory domain.

Rationale:

Anonymous crash/usage data can be used to identify people, companies and information, which can be considered data ex-filtration from company systems.

Impact:

If this setting is disabled, this information is not sent to Google.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled:

Computer Configuration\Administrative Templates\Google\Google Chrome\Enable reporting of usage and crash-related data

Default Value:

Unset (Same as Enabled, but user can change)

See Also

https://workbench.cisecurity.org/benchmarks/8691

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|4.8

Plugin: Windows

Control ID: 442064f4cb17693eb6879a267bbc5ab67f1d2e69c7bd7dba3071af34004b720c