cyberstrikeus 3.1.6.3 Ensure default for permission to view conversations is restricted
Level
L1
Profile Applicability
- Enterprise Level 1
Type
Manual
Description
By default, only allow group members to view group conversations.
Rationale
Conversation viewing can always be expanded by exception for certain groups as needed (Need to know), but by default be restricted.
Impact
No practical impact, since Group members can view conversations in the Group.
Audit
To verify this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Groups for Business - Select
Sharing options - Verify
Default for permission to view conversationsisAll group members
Remediation
To configure this setting via the Google Workspace Admin Console:
- Log in to
https://admin.google.comas an administrator - Select
Apps - Select
Google Workspace - Select
Groups for Business - Select
Sharing options - Set
Default for permission to view conversationstoAll group members - Select
Save
Default Value
Default for permission to view conversations is All organization users
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Profile
Level 1