cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
129 stars 13 forks source link

GWS.COMMONCONTROLS.14.1v0.1 Rego not actually implemented #239

Closed adhilto closed 3 months ago

adhilto commented 3 months ago

🐛 Summary

The Rego needs to changed to not-implemented. The baseline requirement: image

What it checks: ensure that the following is set to enabled image

Maybe enabling GCP sharing options is a prereq to sharing the logs, but simply hitting "enabled" won't automatically send all your logs to your centralized SEIM. That would require an extra step, depending on what the agency is using as their SEIM.

To reproduce

N/A

Expected behavior

Not implemented