800-53|SC-18(3)

Title

PREVENT DOWNLOADING / EXECUTION

Description

The information system prevents the download and execution of [Assignment: organization-defined unacceptable mobile code].

Reference Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Parent Title: MOBILE CODE

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 (L1) Ensure 'Open 'safe' files after downloading' is 'Disabled'UnixCIS MacOS Safari v2.0.0 L1
1.1.5.1 Ensure 'Automatically download attachments' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.1.5.1 Ensure 'Automatically download attachments' is set to DisabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.1.12.2. Configuring Smart Document Manifests: Level II EnabledWindowsCIS MS Office 2007 v1.1.0 L2
1.2 Ensure 'Continue running background apps when Google Chrome is closed' is set to 'Disabled'WindowsCIS Google Chrome L1 v2.0.0
1.2.1.7 Remove File Extensions Blocked as Level 1: Level I not configured (Does Not Exist).WindowsCIS MS Office 2007 v1.1.0 L1
1.2.1.8 Remove File Extensions Blocked as Level 2: Level I DisabledWindowsCIS MS Office 2007 v1.1.0 L1
1.2.1.10. Automatically Download Attachments: Level II DisabledWindowsCIS MS Office 2007 v1.1.0 L2
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - excel.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - exprwd.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - groove.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - msaccess.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - mse7.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - mspub.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - onent.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - outlook.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - powerpnt.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - pptview.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - spDesign.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - visio.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.1.14 Ensure 'Restrict ActiveX Install' is set to Enabled - winproj.exeWindowsCIS Microsoft Office 2016 v1.1.0
1.2.11.1 Block Automatic Download of External Content: Level I DisabledWindowsCIS MS Office 2007 v1.1.0 L1
1.2.11.2. Whitelisted Automatic Download of External Content: Level II DisabledWindowsCIS MS Office 2007 v1.1.0 L2
1.2.11.4. Trusted Zone Automatic Download of External Content: Level II EnabledWindowsCIS MS Office 2007 v1.1.0 L2
1.2.11.5 Automatic Picture Download for Internet Safe Zones: Level I DisabledWindowsCIS MS Office 2007 v1.1.0 L1
1.2.11.6. Automatic Picture Download for Internet Safe Zones: Level II DisabledWindowsCIS MS Office 2007 v1.1.0 L2
1.3 Enable 'Prevent users from bypassing SmartScreen Filter's application reputation warnings about files that are not commonly downloaded'WindowsCIS IE 9 v1.0.0
1.3.5.1. Graphics Loading from non-Excel Created Web Pages: Level II DisabledWindowsCIS MS Office 2007 v1.1.0 L2
1.4 Set 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet' to 'Enabled'WindowsCIS IE 10 v1.1.0
1.4 Set 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet' to 'Enabled'WindowsCIS IE 11 v1.0.0
1.4.1.1.2 Ensure 'Load Pictures from Web Pages Not Created in Excel' is set to DisabledWindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.1.1.2 Ensure 'Load Pictures from Web Pages Not Created in Excel' is set to DisabledWindowsCIS Microsoft Office Excel 2013 v1.0.1
1.5.4.1 Unblock Automatic Download of Linked Images: Level I DisabledWindowsCIS MS Office 2007 v1.1.0 L1
1.6.6.7 Ensure 'Unblock Automatic Download of Linked Images' is set to DisabledWindowsCIS Microsoft Office PowerPoint 2016 v1.0.1
1.6.6.7 Ensure 'Unblock Automatic Download of Linked Images' is set to DisabledWindowsCIS Microsoft Office PowerPoint 2013 v1.0.1
1.7 Set 'Automatically download attachments' to 'Disabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.10 Set 'Block Trusted Zones' to 'Enabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.13 Set 'Display pictures and external content in HTML e- mail' to 'Enabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.13.1.1 Ensure 'Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.13.1.1 Ensure 'Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists' is set to DisabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.13.1.2 Ensure 'Block Trusted Zones' is set to EnabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.13.1.2 Ensure 'Block Trusted Zones' is set to EnabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.13.1.3 Ensure 'Display pictures and external content in HTML e-mail' is set to EnabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.13.1.3 Ensure 'Display pictures and external content in HTML e-mail' is set to EnabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.13.3.1.5 Ensure 'Remove file extensions blocked as Level 1' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.13.3.1.5 Ensure 'Remove file extensions blocked as Level 1' is set to DisabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.13.3.1.6 Ensure 'Remove file extensions blocked as Level 2' is set to DisabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
1.13.3.1.6 Ensure 'Remove file extensions blocked as Level 2' is set to DisabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.26 Set 'Remove file extensions blocked as Level 1' to 'Disabled'WindowsCIS MS Office Outlook 2010 v1.0.0
1.27 Set 'Remove file extensions blocked as Level 2' to 'Disabled'WindowsCIS MS Office Outlook 2010 v1.0.0