Ensure only users inside your organization can distribute content externally

MediumLevel 1Manual reviewgoogle-workspace

Description

You should control who is allowed to distribute organizational content to shared drives owned by another organization. Sharing and collaboration are key; however, only your users should have the authority over where company content is shared with to prevent unauthorized disclosures of information.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Distributing content outside of <Company>, ensure Only users in <Company> is selected

How it is fixed

Fix method: Guidance or infrastructure patch

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Sharing options 6. Under Distributing content outside of <Company>, select - Only users in <Company> 7. Select Save

Properties

Operating systems: Any
Tags: google-workspacesaas
Reference: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.1.6 Ensure only users inside your organization can distribute content externally