Title

A warning before printing that the document contains tracking changes must be provided. (Cat II impact)

Discussion

Tracked changes or comments embedded within a document may contain sensitive, insulting, or embarrassing information that the document owner forgot, or that a contributor may have inserted.

Check Content

Verify the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2013 -> Word Options -> Security "Warn before printing, saving or sending a file that contains tracked changes or comments" is set to "Enabled". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\15.0\word\options Criteria: If the value WarnRevisions is REG_DWORD = 1, this is not a finding

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Word 2013 -> Word Options -> Security "Warn before printing, saving or sending a file that contains tracked changes or comments" to "Enabled".

Additional Identifiers

Rule ID: SV-53585r2_rule

Vulnerability ID: V-17813

Group Title: DTOO303 - Warn before printing

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.