Benchmark: CIS v1.2.0

Overview

The CIS Google Workspace Foundations Benchmark provides the prescriptive guidance for establishing a secure configuration posture for CIS Google Workspace Foundations Benchmark v1.2.0.

Profiles

The following configuration profiles are defined by this Benchmark:

Enterprise Level 1

Items in this profile apply to customer deployments of Google Workspace with an Enterprise license and intend to:

be practical and prudent;
provide a clear security benefit; and
not inhibit the utility of the technology beyond acceptable means.

Enterprise Level 2

This profile extends the "Enterprise Level 1" profile. Items in this profile exhibit one or more of the following characteristics and is focused on customer deployments of Google Workspace Enterprise:

are intended for environments or use cases where security is paramount
acts as defense in depth measure
may negatively inhibit the utility or performance of the technology.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-googleworkspace-compliance

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select CIS v1.2.0.

Run this benchmark in your terminal:

powerpipe benchmark run googleworkspace_compliance.benchmark.cis_v120

Snapshot and share results via Turbot Pipes:

powerpipe benchmark run googleworkspace_compliance.benchmark.cis_v120 --share