Checklist Summary:

This Microsoft Office Publisher 2010 Security Technical Implementation Guide (STIG) provides the technical security policies, requirements, and implementation details for applying security concepts to Commercial-Off-The-Shelf (COTS) applications. The nearly universal presence of systems on the desktops of all levels of staff provides tremendous opportunities for office automation, communication, data sharing, and collaboration. Unfortunately, this presence also brings about dependence and vulnerabilities. Malicious and mischievous forces have attempted to take advantage of the vulnerabilities and dependencies to disrupt the work processes of the Government. Compounding this problem is the fact that the vendors of software applications have not expended sufficient effort to provide strong security in their applications. Where applications do offer security options, the default settings typically do not provide a strong security posture. The requirements and recommendations set forth in this document will assist Information Assurance Officers (ISSO) and Information Assurance Managers (ISSMs) in protecting desktop applications in DoD locations hereafter referred to as sites. The responsible Configuration Control Board (CCB) will approve revisions to site systems that could have a security impact. Therefore, before implementing desktop application security measures, the ISSO will submit a change notice to the CCB for review and approval. Although there are a few different operating system platforms for desktop environments, the security requirements detailed in this document target to applications installed on Microsoft Windows 7 platforms only. This STIG contains security technical implementation guidance for Microsoft Office Publisher 2010 only. There are multiple STIG packages for Microsoft Office 2010; each contains technology-specific guidelines for the respective package that are to be applied along with the Microsoft Office System guidelines. The individual packages are: ? Microsoft Access 2010 ? Microsoft Excel 2010 ? Microsoft InfoPath 2010 ? Microsoft Office System 2010 ? Microsoft OneNote 2010 ? Microsoft Outlook 2010 ? Microsoft PowerPoint 2010 ? Microsoft Project 2010 ? Microsoft Publisher 2010 ? Microsoft Word 2010

Checklist Role:

• Desktop Client

Known Issues:

Not Provided

Target Audience:

Not Provided

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not Provided

Regulatory Compliance:

DOD Directive 8500.01

Comments/Warnings/Miscellaneous:

Not Provided

Disclaimer:

Not Provided

Product Support:

Not Provided

Point of Contact:

disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:

Updated status from "Under Review" to "Final" - 21 July 2015

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 07/21/2015