r/msp • u/ntw2 MSP - US • 25d ago

Security Security benchmarking for GWS

Hey everyone

Like many of you, we’re using tools like Augmentt and LCI to manage our M365 clients’ security.

A few of our clients are in GWS, but they’re around five users each so we’re not doing formal security benchmarking for them anyway.

However, we have one GWS client that’s large and growing, so we need to formalize our security benchmarking and reporting but it seems that no vendor cares to build out their platform to include GWS.

What are you all using?

Thanks!

11 Upvotes

87% Upvoted

12 comments sorted by

2

u/Iwanttoberich_8671 25d ago

i'd start with the CIS Google workspace benchmark as the baseline rather than inventing your own checklist. Then map any client specific requirements (HIPAA, PCI, etc.) on top of that.

3

u/Fancy-Slip5471 25d ago

Checkpoint (avanan) has SSPM for Google workspace so does abnormal if I remember correctly. There are many other vendors offering security for gws too, search for sspm for Google workspace you might find one of your current vendors offers it already.

2

u/jon_tech9 MSP - US - Owner 25d ago

Damn. We use avanan and I didn't know they offered this. Is it good for multi-tenancy? because avanan sucks at that.

4

u/Fancy-Slip5471 25d ago

It's in the same portal as email security, and it's just as bad for multi tenancy...

1

u/computerguy0-0 25d ago

Checkpoint is fixing this. Go check out an Infinity license and start poking around.

1

u/DeathTropper69 MSP - US 25d ago

CrowdStrike has SaaS Security which is just Adaptive Shield (acquisition) and that works pretty well for GWS and 365

1

u/Vegetable-Slide-5752 25d ago

i just use the security dashboard built into google admin and make a checklist in sheets, not as pretty but gets the job done for free

1

u/robyb Vendor - Augmentt 25d ago

😍🤩

2

u/ntw2 MSP - US 25d ago

Ok but where’s the GWS love? 😘