Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding in Policies for Meet for Automatic Recording and Transcription #570

Merged
merged 5 commits into from
Jan 22, 2025
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 59 additions & 0 deletions scubagoggles/baselines/meet.md
Original file line number Diff line number Diff line change
Expand Up @@ -228,3 +228,62 @@ Incoming calls SHALL be restricted to contacts and other users in the organizati
4. Click **Incoming call restrictions**.
5. Ensure **Users receive calls only from contacts and other users in the organization** or **Users can't receive calls** is selected.
6. Click **Save**.

## 6. Automatic Meeting Recording and Transcripts

This section covers automatic recording and transcripts for Google Meet.
buidav marked this conversation as resolved.
Show resolved Hide resolved
mdueltgen marked this conversation as resolved.
Show resolved Hide resolved

### Policies

#### GWS.MEET.6.1v0.3
Automatic recordings for Google Meet SHALL be disabled.

- _Rationale:_ Automatic recordings could record sensitive information. By selecting this setting, it potentially mitigates unauthorized data leakage.
- _Last modified:_ January 2024

- MITRE ATT&CK TTP Mapping
mdueltgen marked this conversation as resolved.
Show resolved Hide resolved
- [T1123: Audio Capture](https://attack.mitre.org/techniques/T1123/)
- [T1048: Exfiltration Over Alternative Protocol](https://attack.mitre.org/techniques/T1048/)
- [T1565: Data Manipulation](https://attack.mitre.org/techniques/T1565/)

### Resources
- [Choose automatic meeting artifact settings for your organization](https://support.google.com/a/answer/15496523?p=automaticmeetingrecords)

### Prerequisites
- None

mdueltgen marked this conversation as resolved.
Show resolved Hide resolved
#### GWS.MEET.6.2v0.3
Automatic transcripts for Google Meet SHALL be disabled.

- _Rationale:_ Automatic transcripts could record sensitive information. By selecting this setting, it potentially mitigates unauthorized data leakage.
- _Last modified:_ January 2024

- MITRE ATT&CK TTP Mapping
mdueltgen marked this conversation as resolved.
Show resolved Hide resolved
- [T1113: Screen Capture](https://attack.mitre.org/techniques/T1113/)
- [T1048: Exfiltration Over Alternative Protocol](https://attack.mitre.org/techniques/T1048/)
- [T1565: Data Manipulation](https://attack.mitre.org/techniques/T1565/)


### Resources
- [Choose automatic meeting artifact settings for your organization](https://support.google.com/a/answer/15496523?p=automaticmeetingrecords)

### Prerequisites
- None

### Implementation

#### GWS.MEET.6.1v0.3 Instructions
1. Sign in to the [Google Admin Console](https://admin.google.com).
2. Select **Menu** -> **Apps** -> **Google Workspace** -> **Google Meet**.
3. Click **Meet video settings**.
4. Click **Automatic recording**.
5. Ensure **Meetings are recorded by default** is unselected.
6. Click **Save**.

#### GWS.MEET.6.2v0.3 Instructions
1. Sign in to the [Google Admin Console](https://admin.google.com).
2. Select **Menu** -> **Apps** -> **Google Workspace** -> **Google Meet**.
3. Click **Meet video settings**.
4. Click **Automatic transcription**.
5. Ensure **Meetings are transcribed by default** is unselected.
6. Click **Save**.
Loading