# Cis Gworkspace 3.1.2.2.1

> Ensure offline access to documents is disabled

- Skill: `cyberstrikeus/cis-gworkspace-3-1-2-2-1` (Agent Skill)
- Install (CLI): `npx skillmds@latest add cyberstrikeus/cis-gworkspace-3-1-2-2-1`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cyberstrikeus/cis-gworkspace-3-1-2-2-1/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: cyberstrikeus (https://skillmd.com/u/cyberstrikeus)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cyberstrikeus/cis-gworkspace-3-1-2-2-1

---


# 3.1.2.2.1 Ensure offline access to documents is disabled

## Level

L1

## Profile Applicability

- Enterprise Level 1

## Type

Manual

## Description

Prevent documents from being locally accessible on an unconnected device.

## Rationale

This setting prevents an organization's files from being stored locally, thus limiting data loss issues if the device is lost or stolen.

## Impact

Copies of recent files are only synced and saved on devices if you've defined a managed policy to do so.

**NOTE:** All users will lose access to offline documents on all devices if managed devices policies are not set.

**NOTE:** Setting up policies to control offline access on individual devices is outside the scope of this Benchmark. Additional information on doing this for various device types can be found in Google documentation.

## Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to `https://admin.google.com` as an administrator
2. Select `Apps`
3. Select `Google Workspace`
4. Select `Drive and Docs`
5. Select `Features and Applications`
6. Select `Offline`
7. Ensure `Control offline access using device policies` is `checked`

## Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to `https://admin.google.com` as an administrator
2. Select `Apps`
3. Select `Google Workspace`
4. Select `Drive and Docs`
5. Select `Features and Applications`
6. Select `Offline`
7. Set `Control offline access using device policies.` to `checked`
8. Select `Save`

## Default Value

`Control offline access using device policies` is `unchecked`

## CIS Controls

| Controls Version | Control                                                                         | IG 1 | IG 2 | IG 3 |
| ---------------- | ------------------------------------------------------------------------------- | ---- | ---- | ---- |
| v8               | 4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and Software |      | x    | x    |