What's changed: Created Associate Google Workspace Administrator Chapter 4 (Domain 4 "Security/access": strengthening auth = enforce 2SV/security keys-passkeys/SAML SSO/password policy/recovery; access control and response = context-aware access/security dashboard/alert center/block less secure apps/compromise suspend-reset-session revocation).
4.2Access control and security response
Understand context-aware access to control access by device/location/IP, the security dashboard and alert center to understand and respond to threats, blocking less secure apps, and operations to protect accounts during compromise.
Even with strong authentication, context-based control and detecting/responding to anomalies are essential. Cover condition-based access control and the means to surface and respond to threats.
4.2.1Context-aware access
Context-aware access allows/restricts access based on conditions a user must meet (device posture, location/country, IP range, whether a corporate device, etc.)—a zero-trust mindset. E.g., allow Drive only from managed devices, block from a certain country. Map "control access by condition = context-aware access."
4.2.2Surfacing and responding to threats
Use the security dashboard to overview the org security posture (sharing, spam, auth) and the alert center to receive and act on alerts like suspicious logins or phishing (linked to the investigation tool). Block less secure apps using old auth, and protect suspected-compromised accounts via suspend / password reset / session revocation. Map "overview threats = security dashboard," "receive and respond to alerts = alert center," and "cut off old risky connections = block less secure apps."
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.