GROUP-006: Groups are visible in the directory (GWS.GROUPS.4.1)
- Platform
- Google Workspace
- Category
- Collaboration
- Severity
- Low
- Zero Trust pillar
- Visibility & Analytics (weight 1)
- Golden fixtures
- 3
- Branch coverage
- Observed: fixtures prove the verdicts they exercise
- Provenance
- baseline
What it checks
SCuBA GWS.GROUPS.4.1 requires that groups not be hideable from the directory — hidden groups undermine transparency and oversight of who can be reached and what access exists. This check reads the groups_for_business.groups_sharing policy and warns any organizational unit where owners can hide groups (ownersCanHideGroups) or new groups are hidden by default (newGroupsAreHidden).
Recommended value
Owners cannot hide groups and new groups are not hidden by default
Remediation
In Groups for Business settings, prevent group owners from hiding groups from the directory and ensure new groups are not hidden by default, preserving directory transparency.
Fixture-proven verdicts
Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.
| Scenario | Expected verdict |
|---|---|
| clean | PASS |
| not-assessed | Not Assessed |
| warn | WARN |
Framework mappings
- CISA SCuBA
- GWS.GROUPS.4.1v1
- NIST SP 800-53
- AC-22, AU-6