Cis Gworkspace 3.1.3.4.3.2

3.1.3.4.3.2 Ensure protection against spoofing of employee names is enabled

Overview

Description

Moves employee spoofing emails to spam folder.

Rationale

You should protect your users from employee spoofing emails.

Impact

Employee spoofed emails will be moved to a user's spam folder.

Default Value

• Protect against spoofing of employee names = checked
• Action = Keep email in inbox and show warning (default)

Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Spoofing and authentication, ensure Protect against spoofing of employee names is checked
6. Ensure Action is Move email to spam

Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to https://admin.google.com as an administrator
2. Select Apps
3. Select Google Workspace
4. Select Gmail
5. Under Safety - Spoofing and authentication, set Protect against spoofing of employee names to checked
6. Set Action to Move email to spam
7. Select Save

CIS Controls