STIGQter: STIG Summary: Google Chrome Current Windows Security Technical Implementation Guide Version: 2 Release: 11 Benchmark Date: 02 Jul 2025:

DevTools Generative AI features must be disabled.

DISA Rule

SV-275781r1106671_rule

Vulnerability Number

V-275781

Group Title

SRG-APP-000089

Rule Version

DTBC-0076

Severity

CAT II

CCI(s)

• CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.

Weight

10

Fix Recommendation

Windows group policy:
1. Open the group policy editor tool with gpedit.msc.
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI
Policy Name: Settings for DevTools Generative AI Features
Policy State: Enabled
Policy Value: Do not allow DevTools Generative AI Features

Check Contents

Universal method:
1. In the omnibox (address bar) type "chrome:// policy".
2. If "DevToolsGenAiSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding.

Windows method:
1. Start "regedit".
2. Navigate to "HKLM\Software\Policies\Google\Chrome\".
3. If the "DevToolsGenAiSettings" value name does not exist or its value data is not set to "2", this is a finding.

Vulnerability Number

V-275781

Documentable

False

Rule Version

DTBC-0076

Severity Override Guidance

Universal method:
1. In the omnibox (address bar) type "chrome:// policy".
2. If "DevToolsGenAiSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding.

Windows method:
1. Start "regedit".
2. Navigate to "HKLM\Software\Policies\Google\Chrome\".
3. If the "DevToolsGenAiSettings" value name does not exist or its value data is not set to "2", this is a finding.

Check Content Reference

M

Target Key

4081