Cis Gworkspace 3.1.3.3.1

3.1.3.3.1 Enable quarantine admin notifications for Gmail

Overview

Description

Quarantines can help prevent spam, minimize data loss, and protect confidential information. They can also help moderate message attachments so users don't send, open, or click something they shouldn't.

Rationale

Admins should be notified periodically when messages are quarantined so they can take the appropriate actions.

Impact

Admins will begin receiving quarantine notifications as emails are quarantined.

Default Value

Notify periodically when messages are quarantined is unchecked

Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Manage quarantines, ensure each quarantine has Notify periodically when messages are quarantined is checked

Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Manage quarantines, set Notify periodically when messages are quarantined to checked

As required, give appropriate users the Access Admin Quarantine and/or Access restricted quarantine roles.

CIS Controls

This control does not map directly to a specific CIS Controls v8/v7 safeguard.