cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
128 stars 13 forks source link

GWS Common Controls 2.2 #290

Open jkaufman-mitre opened 1 month ago

jkaufman-mitre commented 1 month ago

Policy Re-evaluation post 0.2 release

NOTE: telling people to turn on context-aware access without telling them what conditions to add does literally nothing. So "if necessary" doesn't make sense. It's necessary. Also we don't want just MAY controls... Or maybe just cut 2.2, make it a note under 2.1. And add more details to 2.1 about making custom access levels

jkaufman-mitre commented 1 month ago

We will talk to @prodjom and @tmcomeau about this.