Topic

Microsoft Office macros

Applicable to

all

History

Priority

Must

Dec 2023

Only privileged users responsible for checking that Microsoft Office macros are free of malicious code can write to and modify content within Trusted Locations.

The existing control relating to only privileged users responsible for checking that Microsoft Office macros are free of malicious code being able to write to and modify content within Trusted Locations was reworded.

Nov 2018

Microsoft Office macros are only allowed to execute in documents from Trusted Locations where write access is limited to personnel whose role is to vet and approve macros.

Added to address a gap in guidance on the hardening of Microsoft Office.