TMAegisBeta
More rules for google-workspace

Google Workspace

TMA-GWS-3.1.1.2.1

Ensure external sharing options for secondary calendars are configured

MediumLevel 1Manual reviewgoogle-workspace

Description

Control how much calendar information users in your organization can share externally. Prevent data leakage by restricting the amount of information is externally viewable when a user shares their calendar with someone external to your organization.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select External sharing options for secondary calendars 6. Ensure Only free/busy information (hide event details) is selected

How it is fixed

Fix method: Guidance or infrastructure patch

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Calendar 5. Under General settings, select External sharing options for secondary calendars 6. Select Only free/busy information (hide event details) 7. Select Save

Properties

Operating systems
Any
Tags
google-workspacesaas
Reference
CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.1.2.1 Ensure external sharing options for secondary calendars are configured