5 Steps to improve your google workspace security.
Email is one of the primary gateways of your company to the outside world. While traffic from other sources can be monitored through sophisticated devices and software, it is important to follow best practices that ensure that the email services are safe and secure for your organization.
- Enabling all proper DNS records. This is one of the most critical step to increase you overall email security. The additional DNS records like SPF, DKIM, DMARC records will ensure that you get lesser spam emails while at the same time improved the reliability of delivery for the mails directed at your customer and vendor mailboxes.
- Enable Password Policies. As an admin, you can enforce password requirements to protect your users’ managed Google Accounts and meet your organization’s compliance needs. You can also see which of your users’ passwords are weak by monitoring their password strength.
- Enable alerts from audit log events. Reporting rules are custom rules that enable you to set up alerts based on log event data that's displayed on the audit and investigation page. To configure a rule, you set up conditions for the rule, and specify what actions to are to be performed when the conditions are met. A rule is simply a way of saying, if x happens, automatically do y. For example, you can set up a reporting rule to alert you when a user makes a Drive file visible on the web.
- Enable 2 Factor Authentication for admin accounts. 2-Step Verification puts an extra barrier between your business and cyber-criminals who try to steal usernames and passwords to access business data. Turning on 2-Step Verification is the single most important action you can take to protect your business particularly administrative accounts.
- Disallow less secure apps. By disabling less secure apps, the security of your account can be enhanced. It also ensures that the users receive an email informing that someone has attempted to access their account through an application that is not secure.
- Enable enhanced phishing protection. You can add an extra layer of security to incoming emails Google workspace gives you ‘Early Phishing Detection.’ Turning that on will enable the machine learning algorithms to identify emails that carry a potential threat.