Ensure Access Checker is configured to limit file access

中レベル 1手動レビューgoogle-workspace

説明

When a user shares a file via a Google product other than Docs or Drive (e.g. by pasting a link in Gmail), Google can check that the recipients have access. If not, when possible, Google will ask the user to pick how they want to share the file. In general, access should be restricted to the smallest group possible. In this case recipients only.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Ensure Recipients only. is checked

修正方法

修正方法: ガイダンスまたは IaC パッチ

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Set Recipients only. to checked 8. Select Save

プロパティ

オペレーティングシステム: すべて
タグ: access-controlgoogle-workspacesaas
参照: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.1.5 Ensure Access Checker is configured to limit file access