Checklist Summary:

This document, along with the associated STIG, has set forth requirements based upon having a secured Windows environment as described in various other documents. These documents include various National Security Agency (NSA) guides (found at http://www.nsa.gov/snac/) and the Windows 2000/XP/2003/Vista Addendum available from the IASE web site (http://iase.disa.mil/). The superset of these requirements can be found in the appropriate Windows Checklist, which is also available from the IASE web site. Failure to follow these requirements can significantly diminish the value of many of the specifications in this document. Security controls that are managed through the underlying operating system platform directly affect the strength of the security that surrounds desktop applications. This section highlights some measures that are taken to increase that strength. This section of the document provides the following categories of information: Considerations for the terminology and content of this document Information relevant to general desktop application security that is not specific to an individual product Limited guidance on individual products or categories of products that are not covered in subsequent chapters

Checklist Role:

• Web Browser

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Although there are a few different operating system platforms for desktop environments, this document addresses applications running on Microsoft Windows platforms. This document does not include specific guidance for UNIX or Linux or Apple desktop environments at this time.

Regulatory Compliance:

DoD Directive (DoDD) 8500.1

Comments/Warnings/Miscellaneous:

It must be noted that the guidelines specified should be evaluated in a local, representative test environment before implementation within large user populations. The extensive variety of environments makes it impossible to test these guidelines for all potential software configurations. For some environments, failure to test before implementation may lead to a loss of required functionality.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Version 4, Release 10 - 25 July 2014
Version 4, Release 9 - 24 January 2014
Version 4, Release 8 - 25 October 2013
Version 4, Release 7 - 27 July 2012
Version 4, Release 6 - 27 April 2012
Version 4, Release 5 - 28 October 2011
Version 4, Release 4 - 29 July 2011
Version 4, Release 3 - 28 January 2011
Version 4, Release 2 - 23 April 2012
Version 4, Release 1 - 29 December 2009
Updated "Point of Contact" - 15 January 2015
Updated URL to reflect change to the DISA website - http --> https
moved to archive status - 4/15/19
Updated URLs - 6/24/19
updated URLs - 9/11/19

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 09/11/2019