Skip to main content
CUI

Vulnerability V-278355

Back

V-278355

CAT II

Sending of diagnostic data to Microsoft must be disabled.

Ships Affected
1
Total Findings
2
Open
2
Closed
0

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" is set to "Enabled", and "Neither" from the Options is selected. Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\Microsoft\office\common\clienttelemetry If the value "SendTelemetry" is "REG_DWORD = 3", this is not a finding. If the registry key does not exist or is not configured properly, this is a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Privacy >> Trust Center >> "Configure the level of client software diagnostic data sent by Office to Microsoft" to "Enabled" and select "Neither" from the Options.

STIG Reference

STIG
Microsoft Office 365 ProPlus Security Technical Implementation Guide
Version
3
Release
5
Rule ID
SV-278355r1152352_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl
Unassigned 2026-03-04T15:25:42.171357 View in Context
USNS MONTFORD POINT T-ESD-1 MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl
Unassigned 2026-03-04T15:25:16.145630 View in Context
CUI