GWS-GEMINI-005: Gemini Conversation Sharing Disabled

Platform
Google Workspace
Category
Gemini for Workspace
Severity
Medium
Zero Trust pillar
Applications & Workloads (weight 1)
Golden fixtures
3
Branch coverage
Observed: fixtures prove the verdicts they exercise
Provenance
baseline

What it checks

Gemini conversation sharing via link should be set to OFF to prevent AI conversation content, which may include sensitive prompts and outputs, from being shared outside intended recipients.

Recommended value

Conversation sharing via link set to OFF

Remediation

Admin Console > Generative AI > Gemini app > Sharing > Set 'Allow conversation sharing via link' to OFF.

Fixture-proven verdicts

Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.

Verdict scenarios for GWS-GEMINI-005
ScenarioExpected verdict
inferred-failFAIL
inferred-passPASS
not-implementedNot Assessed

Framework mappings

CISA SCuBA
GWS.GEMINI.4.1v1
NIST SP 800-53
AC-3, AC-4
MITRE ATT&CK
T1567