Cybersecurity and Infrastructure Security Agency Logo

Light mode

Assured Controls Baseline Report

Assured Controls and Assured Controls Plus are paid add-ons with Google Workspace. This baseline is intended as guidance for agencies that already have these add-ons. Users that choose to implement this baseline should carefully consider the tradeoffs involved, including the potential security benefits, usability impacts, and increased licensing fees for the add-on licenses.

Customer Name Customer Domain Customer ID Report Date Baseline Version Tool Version
Cool Example Org example.org ABCDEFG 10/15/2026 15:53:04 Pacific Daylight Time 1 v1.1.0
Policy Indicators:

ASSUREDCONTROLS-1 Google Support Staff Data Access

Control ID Requirement Result Criticality Details
GWS.ASSUREDCONTROLS.1.1v1 Access Approvals SHOULD be enabled.
Automated Check
Pass Should Requirement met.
GWS.ASSUREDCONTROLS.1.2v1 Agencies SHOULD restrict support access to U.S.-based Google staff only.
Automated Check
Pass Should Requirement met.

ASSUREDCONTROLS-2 Data Regions Advanced Settings

Control ID Requirement Result Criticality Details
GWS.ASSUREDCONTROLS.2.1v1 Data processing across multiple regions SHOULD be disabled for all Google Workspace products.
Automated Check Log-Based Check
Warning Should The following OUs are non-compliant:
  1. Cool Example Org
    Features that may process data across multiple regions are enabled for Chat, Gemini