How to govern Security in Google Workspace
A step-by-step guide to governing Security in Google Workspace with Rencore: detect, review by owner and severity, and remediate with an audit trail.
Governing Security in Google Workspace means finding where it goes wrong, reviewing the findings by owner and severity, and remediating with an audit trail. Rencore covers this concern for Google Workspace with the pre-built controls below, so it becomes a repeatable check rather than a one-off cleanup. The steps that follow apply the same detect, review, remediate loop to Security.
Steps
-
Inventory Google Workspace
Connect Google Workspace and let Rencore build a continuous inventory of its resources, owners, and configuration, so governance starts from what exists rather than a stale export.
-
Detect with policies
Turn on the pre-built policies that cover Security in Google Workspace to surface oversharing, sprawl, and misconfiguration on the first scan, before writing a single custom rule.
-
Review by owner and severity
Use the Google Workspace reports to review findings by owner, category, and severity, and to share them with stakeholders who do not have a seat in the platform.
-
Remediate and automate
Apply automations to fix findings at scale, route sensitive changes through approvals, and keep every action reversible and logged for the audit trail.
Google Workspace controls for Security
Grounded in the Rencore catalog. See the full Google Workspace catalog on the Google Workspace connector page.
-
User holds admin privileges
Active admin users have privileged, tenant-wide reach, raising the likelihood that any weakness has real-world impact.
Severity: High -
Super admin without 2-step verification
Detects active admins who are not enrolled in 2-step verification.
Severity: Critical -
Google user without 2-step verification
Detects active non-admin Google users that have not enrolled in 2-step verification.
Severity: Medium -
Admin with domain-wide delegation enabled
Detects super admins that also have domain-wide delegation flagged.
Severity: High -
2-step verification adoption
Active Google users by 2-step verification enrollment status.
-
Users by admin status
Active Google users split by admin vs non-admin status.
-
Suspended users over time
Count of suspended user accounts created per month over the last 12 months.
-
Remove Drive External Share
Removes all anyone-with-link permissions from a Drive file after approval.
