Ensure the Security Report is reviewed regularly for anomalies

HochStufe 1Manuelle Prüfunggoogle-workspace

Beschreibung

As your organization's administrator, you can monitor your users' exposure to data compromise by reviewing the security report. Fields Available: - User - External apps - 2-Step verification enrollment - 2-Step verification enforcement - Password length compliance - Password strength - User account status - Admin status - Security keys enrolled - Less secure apps access - Gmail (IMAP) - last used time - Gmail (POP) - last used time - Gmail (Web) - last used time - External shares - Internal shares - Public - Anyone with link - Outside domain - Anyone in domain shares - Anyone in domain with link shares - Within domain shares - Private shares Details on what each of these fields mean can be found here. This report should be reviewed weekly. NOTE: In larger organizations reviewing this entire report weekly may not be possible. At a minimum, all Administrator and Super Administrator user...

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Reporting 3. Select Reports 4. Select User Reports 5. Select Security, and a table of results will be displayed with the fields listed in the Recommendation description above. 6. Review the displayed users and values for anomalies

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

The remediation for any anomalies in the various fields varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin not enrolled in 2-Step Verification can be remedied by implementing the Remediation procedure for the recommendation Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles.

Eigenschaften

Betriebssysteme: Beliebig
Tags: google-workspacesaas
Referenz: CIS Google Workspace Foundations Benchmark v1.4.0 - 5.1.1.2 Ensure the Security Report is reviewed regularly for anomalies