Ensure offline access to documents is disabled

MediumLevel 1Manual reviewgoogle-workspace

Description

Prevent documents from being locally accessible on an unconnected device. This setting prevents an organization's files from being stored locally, thus limiting data loss issues if the device is lost or stolen.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Features and Applications 6. Select Offline 7. Ensure Control offline access using device policies is checked

How it is fixed

Fix method: Guidance or infrastructure patch

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Features and Applications 6. Select Offline 7. Set Control offline access using device policies. to checked 8. Select Save

Properties

Operating systems: Any
Tags: access-controlgoogle-workspacesaas
Reference: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.2.1 Ensure offline access to documents is disabled