Google Workspace
TMA-GWS-4.1.1.3
Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users
説明
Enforce 2-Step Verification (Multi-Factor Authentication) for all users. Add an extra layer of security to users accounts by asking users to verify their identity when they enter a username and password. 2-Step Verification (Multi-factor authentication) requires an individual to present a minimum of two separate forms of authentication before access is granted. 2-Step Verification provides additional assurance that the individual attempting to gain access is who they claim to be. With 2- Step Verification, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.
チェック方法
監査方法: 手動レビュー
To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select 2-Step Verification 4. Under Authentication, ensure Allow users to turn on 2-Step Verification is checked 5. Ensure Enforcement is set to On 6. Ensure New user enrollment period is set to 2 weeks 7. Under Frequency, ensure Allow user to trust device is not checked 8. Under Methods, ensure Any except verification codes via text, phone call is selected
修正方法
修正方法: ガイダンスまたは IaC パッチ
To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Security 3. Select 2-Step Verification 4. Under Authentication, check - Allow users to turn on 2-Step Verification 5. Set Enforcement to On 6. Set New user enrollment period to 2 weeks 7. Under Frequency, uncheck - Allow user to trust device 8. Under Methods, select - Any except verification codes via text, phone call 9. Select Save
プロパティ
- オペレーティングシステム
- すべて
- タグ
- authgoogle-workspacesaas
- 参照
- CIS Google Workspace Foundations Benchmark v1.4.0 - 4.1.1.3 Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users