Skip to content

Security Settings

Configure and maintain security for {ORG_NAME} Google Workspace

Password Requirements

Current Settings: - Minimum length: {MIN_PASSWORD_LENGTH} characters - Expiry: {PASSWORD_EXPIRY_DAYS} days - History: Last 5 passwords cannot be reused

Change Password Requirements

Via Admin Console: 1. Go to admin.google.com 2. Click "Security" in sidebar 3. Click "Authentication" 4. Adjust password policy

Two-Factor Authentication (2FA)

Current Status: {ENFORCE_2FA}

If enforced, all users MUST have 2FA enabled.

For Users: Enable 2FA

  1. Go to myaccount.google.com
  2. Click "Security"
  3. Find "2-Step Verification"
  4. Click "Get started"
  5. Add recovery phone and email
  6. Save backup codes

For Admins: Enforce 2FA

gam update org "/" 2fa on

Session Management

Current Settings: - Session timeout: {SESSION_TIMEOUT_MINUTES} minutes - Users must re-authenticate after timeout

Recovery Options

Recovery Email

Users should set recovery email: 1. myaccount.google.com 2. Security → Recovery email 3. Add personal email address

Recovery Phone

Users should set recovery phone: 1. myaccount.google.com 2. Security → Recovery phone 3. Add phone number

Device Security

Require Encrypted Connections

gam update org "/" enforce_security_key on

Disable Weak Protocols

Disabled: Less secure app access, older TLS versions

Admin & API Security

Super Admin Accounts

  • Limited to essential admins
  • Requires 2FA
  • Monitor login activity

Service Accounts

For automation and scripts: - Created in Google Cloud Console - Limited permissions - Credentials stored securely (never in Git)

Audit & Logging

Enable Audit Logging

  1. Go to admin.google.com
  2. Click "Reports" → "Audit and investigation"
  3. Review activity logs
  4. Export for compliance/security review

Common Audit Logs

  • User creation/deletion
  • Group membership changes
  • Shared Drive access changes
  • Admin actions

Compliance

Data Retention

{ORG_NAME} retention policy: [TBD]

Contact {ADMIN_EMAIL} for details.

GDPR / Privacy

All {ORG_NAME} data is handled per: - {ORG_NAME} privacy policy - Google Workspace terms - Applicable data protection laws

Best Practices

✅ Do: - Use strong, unique passwords - Enable 2FA for all accounts - Review admin access quarterly - Monitor suspicious activity - Keep recovery options updated

❌ Don't: - Share passwords - Disable 2FA - Use weak passwords - Leave recovery options empty

Incident Response

Suspected Breach

  1. Contact {ADMIN_EMAIL} immediately
  2. Change your password
  3. Verify 2FA is enabled
  4. Check recent account activity

Compromised Account

Contact {ADMIN_EMAIL} to: - Reset password - Revoke app access - Review login history - Re-enable account

Resources

Need help? Contact {ADMIN_EMAIL} or {SUPPORT_EMAIL}