How to Harden Your Google Apps

Summary: Trail of Bits published a hardening guide for Google Apps for Work, aimed at small businesses without dedicated IT staff, recommending a separate domain admin account with 2FA, disabling mail forwarding and delegation, turning on SPF and DKIM, and enabling admin alerts. The guide notes that more than 5 million companies rely on Google Apps, and that organization-wide 2FA enforcement requires an exception group and extra work for each new user.
Bottom line: The guide's own framing is that Google Apps pools a huge amount of business data and is 'target #1' in any modern company - yet the controls it recommends, from a separate admin account to SPF and DKIM, are configuration changes most organizations never finish.

Read the original at Trail of Bits Blog ↗