Enable quarantine admin notifications for Gmail

MediumLevel 1Manual reviewgoogle-workspace

Description

Quarantines can help prevent spam, minimize data loss, and protect confidential information. They can also help moderate message attachments so users don’t send, open, or click something they shouldn’t. Admins should be notified periodically when messages are quarantined so they can take the appropriate actions.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Manage quarantines, ensure each quarantine has Notify periodically when messages are quarantined is checked

How it is fixed

Fix method: Guidance or infrastructure patch

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under Manage quarantines, set Notify periodically when messages are quarantined to checked As required, give appropriate users the Access Admin Quarantine and\or Access restricted quarantine roles

Properties

Operating systems: Any
Tags: google-workspacesaas
Reference: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.3.1 Enable quarantine admin notifications for Gmail