Title

A warning before printing that the document contains tracking changes must be provided. (Cat II impact)

Discussion

Tracked changes or comments embedded within a document may contain sensitive, insulting, or embarrassing information that the document owner forgot, or that a contributor may have placed.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Word 2010 -> Word Options -> Security "Warn before printing, saving or sending a file that contains tracked changes or comments" must be set to "Enabled". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\word\options\vpref Criteria: If the value fWarnRevisions_1125_1 is REG_DWORD = 1 this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2010 -> Word Options -> Security "Warn before printing, saving or sending a file that contains tracked changes or comments" to "Enabled".

Additional Identifiers

Rule ID: SV-242303r961863_rule

Vulnerability ID: V-242303

Group Title: SRG-APP-000516

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.