Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-17521 | DTOO139 | SV-53574r1_rule | ECSC-1 | Medium |
Description |
---|
When users create new document files, Word 2013 saves them in the new Word 2013 .docx format. Ensure this setting is enabled to specify that all new files are created in Word 2013. If a new document is created in an earlier format, some users may not be able to open or use the file, or they may choose a format this is less secure than the Word 2013 format. Users can still select a specific format when they save files, but they cannot change default of this setting from the Word Options dialog box. This enforced user behavior ensures any change to the file format requires additional deliberate user interaction. |
STIG | Date |
---|---|
Microsoft Word 2013 STIG | 2014-01-06 |
Check Text ( C-47722r1_chk ) |
---|
Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2013 -> Word Options -> Save "default file format" is set to "Enabled Word Document (.docx)". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\15.0\word\options Criteria: If the value DefaultFormat is REG_SZ = (blank), this is not a finding. |
Fix Text (F-46498r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2013 -> Word Options -> Save "default file format" to "Enabled Word Document (.docx)". |