The ability of the Office Telemetry Agent to periodically upload telemetry data to a shared folder must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-40885	DTOO415	SV-53217r1_rule		Medium

Description
Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or raises an error in certain Office 2013 applications, the Office Telemetry application adds a record about the event to a local data store. Each record includes a description of the problem and a link to more information. Inventory and usage data is also tracked. The actual logging capability will be enabled, but this policy allows that data to be uploaded to a remote location which, if enabled, could pass information about the internal network and configuration to that remote site.

Description

Office Telemetry is a new compatibility monitoring framework. When an Office document or solution is loaded, used, closed, or raises an error in certain Office 2013 applications, the Office Telemetry application adds a record about the event to a local data store. Each record includes a description of the problem and a link to more information. Inventory and usage data is also tracked. The actual logging capability will be enabled, but this policy allows that data to be uploaded to a remote location which, if enabled, could pass information about the internal network and configuration to that remote site.

STIG	Date
Microsoft Office System 2013 STIG	2015-07-24

Details

Check Text ( None )
None

Fix Text (F-46144r1_fix)
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Telemetry Dashboard -> "Turn on data uploading for Office Telemetry Agent" to "Disabled".