CyberStrikeus/CyberStrike - Page 166

cis-gworkspace-3-1-3-1-1

Ensure users cannot delegate access to their mailbox

cis-gworkspace-3-1-3-1-2

Ensure offline access to Gmail is disabled

cis-gworkspace-3-1-3-2-1

Ensure that DKIM is enabled for all mail enabled domains

cis-gworkspace-3-1-3-2-2

Ensure the SPF record is configured for all mail enabled domains

cis-gworkspace-3-1-3-2-3

Ensure the DMARC record is configured for all mail enabled domains

cis-gworkspace-3-1-3-3-1

Enable quarantine admin notifications for Gmail

cis-gworkspace-3-1-3-4-1-1

Ensure protection against encrypted attachments from untrusted senders is enabled

cis-gworkspace-3-1-3-4-1-2

Ensure protection against attachments with scripts from untrusted senders is enabled

cis-gworkspace-3-1-3-4-1-3

Ensure protection against anomalous attachment types in emails is enabled

cis-gworkspace-3-1-3-4-2-1

Ensure link identification behind shortened URLs is enabled

cis-gworkspace-3-1-3-4-2-2

Ensure scan linked images for malicious content is enabled

cis-gworkspace-3-1-3-4-2-3

Ensure warning prompt is shown for any click on links to untrusted domains

cis-gworkspace-3-1-3-4-3-1

Ensure protection against domain spoofing based on similar domain names is enabled

cis-gworkspace-3-1-3-4-3-2

Ensure protection against spoofing of employee names is enabled

cis-gworkspace-3-1-3-4-3-3

Ensure protection against inbound emails spoofing your domain is enabled

cis-gworkspace-3-1-3-4-3-4

Ensure protection against any unauthenticated emails is enabled

cis-gworkspace-3-1-3-4-3-5

Ensure groups are protected from inbound emails spoofing your domain

cis-gworkspace-3-1-3-5-1

Ensure POP and IMAP access is disabled for all users

cis-gworkspace-3-1-3-5-2

Ensure automatic forwarding options are disabled

cis-gworkspace-3-1-3-5-3

Ensure per-user outbound gateways is disabled

cis-gworkspace-3-1-3-5-4

Ensure external recipient warnings are enabled

cis-gworkspace-3-1-3-6-1

Ensure enhanced pre-delivery message scanning is enabled

cis-gworkspace-3-1-3-6-2

Ensure spam filters are not bypassed for internal senders

cis-gworkspace-3-1-3-7-1

Ensure comprehensive mail storage is enabled

cis-gworkspace-3-1-3-7-2

Ensure 'Send email over a secure TLS connection' Is Enabled

cis-gworkspace-3-1-4-1-1

Ensure external filesharing in Google Chat and Hangouts is disabled

cis-gworkspace-3-1-4-1-2

Ensure internal filesharing in Google Chat and Hangouts is disabled

cis-gworkspace-3-1-4-2-1

Ensure Google Chat externally is restricted to allowed domains

cis-gworkspace-3-1-4-3-1

Ensure external spaces in Google Chat and Hangouts are restricted

cis-gworkspace-3-1-4-4-1

Ensure allow users to install Chat apps is disabled

cis-gworkspace-3-1-4-4-2

Ensure allow users to add and use incoming webhooks is disabled

cis-gworkspace-3-1-6-1

Ensure accessing groups from outside this organization is set to private

cis-gworkspace-3-1-6-2

Ensure creating groups is restricted

cis-gworkspace-3-1-6-3

Ensure default for permission to view conversations is restricted

cis-gworkspace-3-1-7-1

Ensure service status for Google Sites is set to off

cis-gworkspace-3-1-8-1

Ensure access to external Google Groups is OFF for Everyone

cis-gworkspace-3-1-9-1-1

Ensure users access to Google Workspace Marketplace apps is restricted

cis-gworkspace-4-1-1-1

Ensure 2-Step Verification (MFA) is enforced for all users in administrative roles

cis-gworkspace-4-1-1-2

Ensure hardware security keys are used for all users in administrative roles and other high-value accounts

cis-gworkspace-4-1-1-3

Ensure 2-Step Verification (MFA) is enforced for all users