Audit Google Docs

Auditing the security of on-premise data is hard enough. Auditing Google Docs and understanding sharing permissions is nearly impossible. That is, it is nearly impossible without CloudLock for Google Apps.

In order to audit Google Docs, the domain admin needs to understand:

Who has access to what?
What is accessible to whom?
How did access rights to sensitive data change at different points in time?
Which documents are shared outside the domain?

But even the Google Apps domain admin cannot see how data is being shared without assuming the identity of individuals. In short, there is no way to do a comprehensive Google Docs audit using the built-in admin tools.

With CloudLock for Google Apps, IT auditors can perform extensive access control assessments of Google Docs data environments in minutes.

How to answer Google Docs IT auditing questions with CloudLock for Google Apps:

Step 1: Gaining visibility into your Google Docs environment: CloudLock for Google Apps lets you inventory all your company’s Google Docs, showing ownership, who can access each doc, the exposure level and when the docs were last updated.

Step 2: Perform user entitlements reviews of users and groups: Use CloudLock for Google Apps to illustrate all the docs that a user or group has access to and remediate issues. End-users have ABE (Access Based Enumeration) that provides them with a view of only the resources they have access to. Now, the system administrator can have a similar view for each user and group in the environment.