G-Suite Security Reviews
G-Suite can play a pivotal role in an organization’s daily operations by hosting user accounts, sensitive data, and email communications. Its significance cannot be overstated, as any potential security breach or data loss can have far-reaching consequences, ranging from reputational damage to financial losses. As such, ensuring that G-Suite is secured with robust security measures is essential to safeguard an organization’s most valuable assets.
77% of cloud breaches feature stolen or misused user accounts. Therefore, the first part of our G-Suite configuration review is to identify if user accounts, passwords and privileges are being managed well in the organisation.
Business Email Compromise attacks have skyrocketed in recent years. Appropriate email configuration can help reduce this risk. Therefore the second part of our review assesses the configuration against Google security best practices and those of the Centre for Information Security.
Our reviews specifically cover:
- Protection of users accounts such as:
- Password policies and compliance with those
- Appropriate onboarding and offboarding of employees
- Authentication controls in place
- Appropriate use of least-privilege
- Additional protections for administrator accounts
- Check for the existence of shared accounts
- Email security configuration
- DMARC, SPF and DKIM Spoofing protections
- Email scanning and phishing protections
- Review of security defaults
- Defaults permissions for sharing of calendars and files
- Controls for reducing risk of accidental sharing outside of the organisation
- Review of activity reports and alerts for suspicious activity
- Review policies for access from managed devices
- Review of external apps with access to your account
- Review of audit rules
Before we start any testing, we’ll agree on a formal testing Scope document with you. In this, we’ll agree on the G-Suite organisations that are in-scope and how we will access these.
Once our testing is complete, we’ll provide you with a report with detailed findings, their impact and how to fix them. We can also provide consultancy to help fix these if that is useful to you.
