cyberstrikeus 3.1.6.1 Ensure accessing groups from outside this organization is set to private
Level
L1
Profile Applicability
- Enterprise Level 1
Type
Manual
Description
Choose whether people outside your organization can access your groups. Group owners can further restrict access as needed.
Rationale
Who can externally view groups internal to the organization should be carefully controlled and their access vetted as needed.
Impact
No one outside your organization can view or search for your groups. External users can email the group if group settings allow.
Audit
To verify this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Groups for Business - Select
Sharing options - Verify
Accessing groups from outside this organizationisPrivate
Remediation
To configure this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Groups for Business - Select
Sharing options - Set
Accessing groups from outside this organizationtoPrivate - Select
Save
Default Value
Accessing groups from outside this organization is Private
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Profile
Level 1