Ensure shared drive file access is restricted to members only

MoyenneNiveau 1Revue manuellegoogle-workspace

Description

Shared drive file access should be restricted to that shared drive's members Preventing unauthorized users from access sensitive data is paramount in preventing unauthorized or unintentional information disclosures.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow people who aren't shared drive members to be added to files is unchecked

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow people who aren't shared drive members to be added to files to unchecked 7. Select Save

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: access-controlgoogle-workspacesaas
Référence: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.3 Ensure shared drive file access is restricted to members only