Tests authored
- ASD.ISM-1175Privileged user accounts (excluding those explicitly authorised to access online services) are prevented from accessing the internet, email and web services.
- ASD.ISM-1403User accounts are protected by lockout mechanisms aligned to a maximum of five failed logon attempts.
- ASD.ISM-1488Microsoft Office macros in files originating from the internet are blocked.
- ASD.ISM-1504Multi-factor authentication is used to authenticate human users to their organisation's online services.
- ASD.ISM-1648Privileged access to systems and their resources is disabled after 45 days of inactivity.
- ASD.ISM-1649Just-in-time administration is used for the administration of systems and their resources.
- ASD.ISM-1654Internet Explorer 11 is disabled or removed.
- ASD.ISM-1667Microsoft Office is blocked from creating child processes.
- ASD.ISM-1668Microsoft Office is blocked from creating executable content.
- ASD.ISM-1669Microsoft Office is blocked from injecting code into other processes.
- ASD.ISM-1672Microsoft Office macro antivirus scanning is enabled.
- ASD.ISM-1673Microsoft Office macros are blocked from making Win32 API calls.
- ASD.ISM-1695Patches for vulnerabilities in the operating systems of workstations are applied within one month of release.
- ASD.ISM-1872Multi-factor authentication used for authenticating human users of online services is phishing-resistant.