Cis Gworkspace 3.1.3.4.1.2

3.1.3.4.1.2 Ensure protection against attachments with scripts from untrusted senders is enabled

Overview

Description

As a Google Workspace administrator, you can protect incoming mail against phishing and harmful software (malware). You can also choose what action to take based on the type of threat detected.

Rationale

You should protect your users from potentially malicious attachments.

Impact

Users will be warned when they receive an attachments with scripts from an untrusted sender.

Default Value

Protect against attachments with scripts from untrusted senders is enabled is checked

Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Attachments, ensure Protect against attachments with scripts from untrusted senders is checked

Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Attachments, set Protect against attachments with scripts from untrusted senders to checked
6. Select Save

CIS Controls