Checklist Summary:

This Microsoft Office Technology Overview, along with the associated Security Technical Implementation Guide (STIG), provides the technical security policies, requirements, and implementation details for applying security concepts to Commercial-Off-The-Shelf (COTS) applications. The nearly universal presence of systems on the desktops of all levels of staff provides tremendous opportunities for office automation, communication, data sharing, and collaboration. Unfortunately, this presence also brings about dependence and vulnerabilities. Malicious and mischievous forces have attempted to take advantage of the vulnerabilities and dependencies to disrupt the work processes of the Government. Compounding this problem is the fact that the vendors of software applications have not expended sufficient effort to provide strong security in their applications. Where applications do offer security options, the default settings typically do not provide a strong security posture. There are multiple STIG packages for Microsoft Office 2013, each contains technology-specific guidelines for the respective package. The Microsoft Office System 2013 must also be applied when any Office package is installed. The individual packages are: ? Microsoft Access 2013 ? Microsoft Excel 2013 ? Microsoft Groove 2013 ? Microsoft InfoPath 2013 ? Microsoft Lync 2013 ? Microsoft Office System 2013 ? Microsoft OneNote 2013 ? Microsoft Outlook 2013 ? Microsoft PowerPoint 2013 ? Microsoft Project 2013 ? Microsoft Publisher 2013 ? Microsoft SharePoint Designer 2013 ? Microsoft Visio 2013 ? Microsoft Word 2013 This STIG contains security technical implementation guidance for Microsoft Office Visio 2013 only.

Checklist Role:

• Desktop Client

Known Issues:

Not Provided

Target Audience:

Not Provided

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not Provided

Regulatory Compliance:

DOD Directive 8500.01

Comments/Warnings/Miscellaneous:

Not Provided

Disclaimer:

Not Provided

Product Support:

Not Provided

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:

Updated status from "under review" to "final" - 22 June 2015
Updated STIG to V1, R3 - 10-28-2016
updated to FINAL - 12/07/2016
null
Updated URL to reflect change to the DISA website - http --> https
updated to v1,r4 - 4/25/18
Updated to FINAL - 5/27/18
Added GPOs - 8/6/18
Updated to FINAL - 9/6/2018
Updated GPO Resource - 11/29/2018
Corrected SHA for GPO file - 12/19/2018
Updated URLs - 6/11/19
Removed Unsupported Content Link 8/30/2019
removed GPO file - 12/13/19
Added GPO file per DISA - 8/5/2020
updated GPO file - 10/29/2020
Updated GPO per DISA - 5/3/22
null
Updated GPO per DISA - 5/31/22
null
Updated GPO per DISA - 8/1/22
null
updated GPO file - 11/7/22
updated GPO file - 1/31/2023
Updated GPO per DISA - 5/1/23
Updated GPO per DISA - 7/31/23
Updated GPO per DISA - 8/21/23
Updated GPO per DISA - 11/2/23
Corrected SHA discrepancy - 11/3/2023
updated GPO package - 1/31/24
SHA - 2/7/24
Updated Resources - 06/10/2024
Updated resource - 08/15/2024

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 08/15/2024