TMA-GWS-3.1.2.1.1.5

Ensure Access Checker is configured to limit file access

보통레벨 1수동 검토google-workspace

설명

When a user shares a file via a Google product other than Docs or Drive (e.g. by pasting a link in Gmail), Google can check that the recipients have access. If not, when possible, Google will ask the user to pick how they want to share the file. In general, access should be restricted to the smallest group possible. In this case recipients only.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Ensure Recipients only. is checked

조치 방법

조치 방식: 가이드 또는 인프라 패치

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Drive and Docs 4. Select Sharing Settings 5. Select Sharing Options 6. Under Access Checker 7. Set Recipients only. to checked 8. Select Save

속성

운영 체제: 모두
태그: access-controlgoogle-workspacesaas
참고 자료: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.1.5 Ensure Access Checker is configured to limit file access