---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Baseline version 8.0

# New hardening settings for baseline 8.0 {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
New hardening settings have been released with Security Center baseline version 7.0.

* [Enforce field-level ACLs on records created from the query string of the Filtered List view UI of a table](https://www.servicenow.com/docs/rCVzd3AzCiU3RLFo4VeX9w "Use a system property to prevent list filters from affecting the initial values of created records.")
* [Enable multiple (permission policy and boundary) checks to ensure that the Role is privileged in AWS/Bedrock](https://www.servicenow.com/docs/ZNcd4p8Mp47Mtq3NvqzKzQ "Use a system property to determine what checks are used to verify whether a role is allowed to perform a privileged operation.")
* [Enable Guardian for External Agents](https://www.servicenow.com/docs/bbH8XkSXVMd0PMiktcKuIw "Use a system property to protect your Language Learning Models (LLMs) with Guardian.")
* [Enable Identity and Access Audit Tool](https://www.servicenow.com/docs/8ewt7XX0qzrbq8bB1U_3vw "Use Identity and Access Audit to track changes to user accounts, groups, and roles.")
* [Validate MIME Type of Attachments from Inbound Emails](https://www.servicenow.com/docs/AdnF4x1T2eFkRCx3uu_fHQ "Use a system property to validate attachments uploaded from inbound emails.")
* [Enable Jelly JS Interpolation Protection](https://www.servicenow.com/docs/atxjp6VAzzRf3GgIB1BrKg "Use the glide.ui.jelly.js_interpolation.protect property to ensure that any JavaScript about to be executed on a Jelly page is protected from injection with the help of Jelly interpolation.")
* [Prohibit Use of KBA as Single Factor for AI Voice](https://www.servicenow.com/docs/TIcMEjVYUmOsbbPrgdaAfQ "Use a system property to prevent Knowledge Based Authentication (KBA) from being the only factor of authentication required to authenticate to the platform for AI voice.")
* [Require Multi-Factor Authentication for AI Voice Agent](https://www.servicenow.com/docs/5ifdMkWHTlypJcqmaE8Lkg "Use a system property to control whether Multi-Factor Authentication (MFA) is required for the AI voice agent authentication feature.")
* [Log Impersonation History](https://www.servicenow.com/docs/nENcJHZBOgu6M0azMOd9lg "Enable impersonation history logging using a system property.")
* [Validate MIME Type for Multi-Extension Filenames, Polyglot Files, and Null-Byte Injection](https://www.servicenow.com/docs/KltDx45mAa57UZKqVLz1vA "Use a system property to prevent attachments from bypassing MIME-type restrictions.")
* [Enable Jelly JS interpolation protection for nested expressions](https://www.servicenow.com/docs/I8zFggMLIVwsh4IGZ5YIaw "Manage the interpolation protection on your instance.")
* [Enable Role Masking for Agents](https://www.servicenow.com/docs/FADE2Qr5XiaMwXcZgKrxTQ "Use a system property to enable the role masking feature.")
* [Disable adding default roles to Skill ACLs](https://www.servicenow.com/docs/bhwjRp9zzfLGLrt5K4u4sA "Use system properties to control what roles are automatically added to generative AI skill ACLs.")
* [Prevent Reuse of REST API Sessions in UI/Web](https://www.servicenow.com/docs/YgT~HkYaguwSjtb5HyjDWg "Prevent REST API session cookies from bypassing Single Sign-On (SSO) and Multi-Factor Authentication (MFA) controls using a system property.")
* [Enable Anti-CSRF Token for Userperf](https://www.servicenow.com/docs/s4U2BMLB_H5OjP8xpDQYkg "Use a system property to ensure CSRF (Cross-Site Request Forgery) protection is enforced when setting user preferences.")
* [Track Impersonation Events](https://www.servicenow.com/docs/7Q3vyAm~GoWqlVUNLW9Qyw "Enable impersonation event tracking using a system property.")
* [Disable Voice Chat Guest Impersonation](https://www.servicenow.com/docs/xy73ppZU_uUlPlBAU0t4SQ "Use a system property to ensure that voice interactions/conversations are recorded under the appropriate internal integration user.")
* [Prevent OAuth Clients from Using Implicit Grant](https://www.servicenow.com/docs/KmazOWf7aT5c9yUIeD9HLA "Use a system property to avoid the use of the implicit grant type.")
* [Enforce Scope Access Controls on New Tables](https://www.servicenow.com/docs/8A1ligx6XnD91XIOnJYUFw "Use a system property to enforce cross-scope access checks for newly created tables.")
{#new-hardening-settings-for-baseline-eight__ul_dfr_hks_43c}