DEVICE-010: Endpoint Verification Settings

Platform
Google Workspace
Category
Device & Endpoint Management
Severity
Medium
Zero Trust pillar
Devices (weight 1)
Golden fixtures
1
Branch coverage
Observed: fixtures prove the verdicts they exercise
Provenance
baseline

What it checks

Endpoint verification provides device trust signals for context-aware access policies and should be enabled

Recommended value

Endpoint verification enabled for context-aware access

Remediation

Admin Console > Devices > Mobile & endpoints > Settings > General > Enable endpoint verification for context-aware access policies

Fixture-proven verdicts

Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.

Verdict scenarios for DEVICE-010
ScenarioExpected verdict
always-warnWARN

Framework mappings

NIST SP 800-53
AC-19, IA-3
CIS Benchmark
6.10
MITRE ATT&CK
T1078.004