DRIVE-011: Target Audience Settings

Platform
Google Workspace
Category
Drive Security & Data Protection
Severity
Medium
Zero Trust pillar
Data (weight 1)
Golden fixtures
1
Branch coverage
Observed: fixtures prove the verdicts they exercise
Provenance
baseline

What it checks

Target audience settings control who can be suggested when sharing files and should be configured to limit accidental sharing

Recommended value

Target audiences configured to limit sharing suggestions appropriately

Remediation

Admin Console > Directory > Target audiences > Review and configure target audience groups

Fixture-proven verdicts

Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.

Verdict scenarios for DRIVE-011
ScenarioExpected verdict
always-warnWARN

Framework mappings

NIST SP 800-53
AC-3, AC-6
CIS Benchmark
2.11
MITRE ATT&CK
T1530