| name | cis-gworkspace-3.1.2.1.1.1 |
| description | Ensure users are warned when they share a file outside their domain |
| category | cis-gworkspace |
| version | 1.3.0 |
| author | cyberstrike-official |
| tags | ["cis","gcp","google-workspace","drive","docs","sharing","file-access"] |
| cis_id | 3.1.2.1.1.1 |
| cis_benchmark | CIS Google Workspace Foundations Benchmark v1.3.0 |
| tech_stack | ["gcp","google-workspace"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
3.1.2.1.1.1 Ensure users are warned when they share a file outside their domain
Level
L1
Profile Applicability
Type
Manual
Description
Warn the user when they try and share a file and/or shared drive externally.
Rationale
The user may not realize the potential account is external to the organization. Providing a warning allows the user an opportunity to know this and possibly reassess this sharing.
Impact
None, except an additional warning. Sharing can still occur.
Audit
To verify this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.com as an administrator
- Select
Apps
- Select
Drive and Docs
- Select
Sharing Settings
- Select
Sharing Options
- Under
Sharing outside of <Company>
- Ensure
ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well. is checked. Also, ensure the sub-setting For files owned by users in <Company> warn when sharing outside of <Company> is checked.
Remediation
To configure this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.com as an administrator
- Select
Apps
- Select
Drive and Docs
- Select
Sharing Settings
- Select
Sharing Options
- Under
Sharing outside of <Company>
- Set
ON - Files owned by users in <Company> can be shared outside of <Company>. This applies to files in all shared drives as well. to checked. Also, set the sub-setting For files owned by users in <Company> warn when sharing outside of <Company> to checked.
- Select
Save
Default Value
For files owned by users in <Company> warn when sharing outside of <Company> is checked
CIS Controls
