Ensure shared drive file access is restricted to members only

СреднийУровень 1Ручная проверкаgoogle-workspace

Описание

Shared drive file access should be restricted to that shared drive's members Preventing unauthorized users from access sensitive data is paramount in preventing unauthorized or unintentional information disclosures.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow people who aren't shared drive members to be added to files is unchecked

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow people who aren't shared drive members to be added to files to unchecked 7. Select Save

Свойства

Операционные системы: Любая
Теги: access-controlgoogle-workspacesaas
Источник: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.3 Ensure shared drive file access is restricted to members only