The US cybersecurity agency CISA on Tuesday released draft guidance and capabilities for federal agencies to securely use Google Workspace services.
The proposed materials, for which CISA is seeking public comment, include Secure Cloud Business Applications secure configuration baselines for nine Google Workspace services, namely Calendar, Chat, Common Controls, Classroom, Drive and Docs, Gmail, Groups for Business, Meet, and Sites.
Federal agencies are encouraged to provide feedback on the draft baselines until January 12, 2024.
The baselines are available on GitHub and on CISA's website.
The cybersecurity agency also announced the release of ScubaGoggles, an assessment tool designed to help organizations verify that their GWS configuration falls in line with the policies outlined in the SCuBA security configuration baselines.
The tool, which relies on GWS admin log events to perform assessments, was released in alpha and is under active development, meaning that outputs might not be correct, CISA warns.
The GWS baseline documentation provides minimum secure configuration baselines to help federal agencies secure collaboration, along with data and sensitive information stored and transmitted via GWS services.
The development of Google Workspace baselines built on CISA's experience from the Microsoft 365 baselines project, which was opened to public comment between October and December 2022.
The agency plans to release the final M365 baselines early 2024.
This Cyber News was published on www.securityweek.com. Publication date: Wed, 13 Dec 2023 14:58:04 +0000