{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41281,"path":"platform-security/instance-security-hardening-settings/new-hardening-settings-for-baseline-eight.md","title":"New hardening settings for baseline 8.0","bundle":null,"doc_type":null,"release":"australia","body":"\n# New hardening settings for baseline 8.0\n\nNew hardening settings have been released with Security Center baseline version 7.0.\n\n-   [Enforce field-level ACLs on records created from the query string of the Filtered List view UI of a table](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enforce-field-level-acls-on.md)\n-   [Enable multiple \\(permission policy and boundary\\) checks to ensure that the Role is privileged in AWS/Bedrock](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-multiple-permission.md)\n-   [Enable Guardian for External Agents](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-guardian-for-external-agents.md)\n-   [Enable Identity and Access Audit Tool](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-identity-and-access-audit-tool.md)\n-   [Validate MIME Type of Attachments from Inbound Emails](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-validate-mime-type-of-attachments-from-inbound-emails.md)\n-   [Enable Jelly JS Interpolation Protection](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-jelly-js-interpolation-protection.md)\n-   [Prohibit Use of KBA as Single Factor for AI Voice](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-prohibit-use-of-kba-as-single-factor-for-ai-voice.md)\n-   [Require Multi-Factor Authentication for AI Voice Agent](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-require-multi-factor-authentication-for-ai-voice-agent.md)\n-   [Log Impersonation History](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-impersonation-history.md)\n-   [Validate MIME Type for Multi-Extension Filenames, Polyglot Files, and Null-Byte Injection](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-validate-mime-type-for-multi.md)\n-   [Enable Jelly JS interpolation protection for nested expressions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-jelly-js-interpolation-protection-for-nested-expressions.md)\n-   [Enable Role Masking for Agents](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-role-masking-for-agents.md)\n-   [Disable Adding Default Roles to Skill ACLs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-disable-adding-default-roles-to-skill-acls.md)\n-   [Prevent Reuse of REST API Sessions in UI/Web](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-prevent-reuse-of-rest-api-sessions-in-ui-web.md)\n-   [Enable Anti-CSRF Token for Userperf](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-anti-csrf-token-for-userperf.md)\n-   [Track Impersonation Events](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-track-impersonation-events.md)\n-   [Disable Voice Chat Guest Impersonation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-disable-voice-chat-guest-impersonation.md)\n-   [Prevent OAuth Clients from Using Implicit Grant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-prevent-oauth-clients-from-using-implicit-grant.md)\n-   [Enforce Scope Access Controls on New Tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enforce-scope-access-controls-on-new-tables.md)\n\n**Parent Topic:**[New hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/hardening-settings-new.md)\n\n"}}