3.1.1.3.1 Ensure calendar web offline is disabled (Manual)
Description
Limit who is allowed offline calendar access.
Rationale
When enabled, users can turn on offline use for each computer they use. Data is stored on the computer until offline use is turned off by the user. In this case, the organization can lose control of where its data is stored (for this user). Care should be taken regarding which users and groups have this capability enabled.
Impact
Users will not be able to access their calendars offline.
Audit Procedure
To verify this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Calendar - Under
Advanced settings, selectCalendar web offline - Ensure
Allow using Calendar on the web when offlineis unchecked
Expected Result
Allow using Calendar on the web when offline should be unchecked.
Remediation
To configure this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Calendar - Under
Advanced settings, selectCalendar web offline - Set
Allow using Calendar on the web when offlineto unchecked - Select
Save
Default Value
Allow using Calendar on the web when offline is checked
References
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Profile
- Enterprise Level 2