Security isn't one setting, it's a stack of small decisions. Here's the checklist we work through when hardening a Google Workspace environment, roughly in priority order.
Authentication
- Enforce 2-Step Verification for everyone
- Require security keys for admins
- Review and remove unused admin roles
Access & Sharing
- Restrict external sharing to trusted domains where possible
- Apply least-privilege access to Shared Drives
- Vet third-party app access and revoke what's unused
Data & Monitoring
- Turn on DLP rules for sensitive data
- Enable alerts in the security center
- Keep an audit trail and review it regularly
Work top to bottom and you'll close the gaps attackers look for first.
#googleworkspace#security#checklist