search

cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
129 stars 13 forks source link

Lot of manual checks #260

Closed koff75 closed 1 month ago

koff75 commented 2 months ago

🐛 Summary

Hi, I experimented the tool on my Google Workspace tenant, which holds an Enterprise Plus license and is approximately 10 years old, catering to around 1000 users. I evaluated both authentication methods suggested in the documentation, utilizing either a super admin account or a service account. The outcome showed that only a few checks were successfully marked green, indicating a substantial amount of manual testing is required.

If you see the screenshot below, there's a lot manual checks and some 0 green checks. We're using Google Workspace with all the services associated (Meet, Chat, Gmail...).

image

Maybe it could be a fix in a future release, or maybe I did something wrong with the permissions, but with super admin, I could access to any data on the tenant... If you have an idea 🪄☀️ !

Thanks

snarve commented 2 months ago

Thanks for following up. The report indicates multiple manual checks since it is based on log events, and if there are no log events generated recently then the report will not be able to check it. However, there are steps in the readme you can follow to test the tool by changing some of the settings.

image

You can change the settings for some of the baselines and see if that updates the report. Hope this helps.