The admin has to allow enrollment for one or more organizational units from the G Suite Admin console, and end users will be able to individually enroll through this page. Some of these individual options are already available to G Suite accounts and can be set up by helpful administrators, but administrators will now be able to make them available as a set for employees in their organization that are most at risk for targeted attacks (IT admins, executives, employees in regulated or high-risk verticals such as finance or government, etc.).

“Google’s strongest security for those who need it most” includes additional protections such as strong authentication and protection against phishing with physical security keys, restrictions on third-party access to Google account data, and extra identity verification steps during the account recovery process in order to thwart attackers. Advanced Protection Program for enterprise usersĪdvanced Protection Program has been available to high-risk Google users since late 2017.

The option is available only to G Suite Enterprise and G Suite Enterprise for Education customers for the moment. “Additionally, since the alert center integrates with the security center investigation tool for G Suite, organizations can directly launch remediation efforts from within the alert center,” the company added. This includes detections and alerts for anomalous (and suspicious) external file sharing and download behavior.

“Super admins and admins with delegated privileges for the alert center for G Suite will be alerted when potential data exfiltration risks occur based on unusual Google Drive behavior,” Google explained the new capability. The options are both still in beta and some are currently only available to some G Suite customers, but wider availability is likely just a matter of time. Google is rolling out new security options for G Suite users and admins, aimed at alerting organizations about data exfiltration attempts on Google Drive and helping them protect their high-risk users.

Google drive download activity