Cis Gworkspace 3.1.3.4.1.1

3.1.3.4.1.1 Ensure protection against encrypted attachments from untrusted senders is enabled

Overview

Description

As a Google Workspace administrator, you can protect incoming mail against phishing and harmful software (malware). You can also choose what action to take based on the type of threat detected.

Rationale

You should protect your users from potentially malicious attachments.

Impact

Users will be warned when they receive an encrypted attachment from an untrusted sender.

Default Value

Protect against encrypted attachments from untrusted senders is checked

Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Attachments, ensure Protect against encrypted attachments from untrusted senders is checked

Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Attachments, set Protect against encrypted attachments from untrusted senders to checked
6. Select Save

CIS Controls