TMA-GWS-4.3.2
Ensure the Security health is reviewed regularly for anomalies
Описание
As an administrator, the security health page enables you to monitor the configuration of your Admin console settings from one location. For example, you can check the status of settings like automatic email forwarding, device encryption, Drive sharing settings, and much more. Settings reported (Minimum, but could be many more depending on account type): - Blocking of compromised mobile devices - Mobile management - Mobile password requirements - Device encryption - Mobile inactivity reports - Auto account wipe - Application verification - Installation of mobile applications from unknown sources - External media storage - Two-step verification for users - Two-step verification for admins - Security key enforcement for admins Details on what each of these report entries mean can be found here. This report should be reviewed weekly. NOTE: The availability of each individual report on th...
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator. 2. Select Security 3. Select Security center 4. Select Security health, and a table of results will be displayed with the settings listed in the Recommendation description above. 5. Review the displayed values for anomalies
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
The remediation for any anomalies in the various settings varies widely (different sections of the Google Workspace Admin UI). Please refer to Google's documentation for specifics (here). NOTE: Many of these settings will be remedied by implementing other sections of this Benchmark. For example, an Admin not enrolled in 2-Step Verification can be remedied by implementing the Remediation procedure for the recommendation Ensure 2-Step Verification (Multi-Factor Authentication) is enforced for all users in administrative roles.
Свойства
- Операционные системы
- Любая
- Теги
- google-workspacesaas
- Источник
- CIS Google Workspace Foundations Benchmark v1.4.0 - 4.3.2 Ensure the Security health is reviewed regularly for anomalies