Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove GWS.CHAT.5.1 #322

Merged
merged 6 commits into from
Jul 19, 2024
Merged

Remove GWS.CHAT.5.1 #322

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
e314010
Changed 5.1 to a SHOULD and added a note
jkaufman-mitre Jun 21, 2024
29524ef
Fixed statement
jkaufman-mitre Jun 27, 2024
8a40c90
Removed Chat Policy Group 5
jkaufman-mitre Jul 11, 2024
bd2af8b
Remove old Chat.5.1 from Rego
adhilto Jul 11, 2024
00b2332
Updated TOC
jkaufman-mitre Jul 11, 2024
25fe767
Merge branch 'chat-changes-5.1' of https://github.com/cisagov/ScubaGo…
jkaufman-mitre Jul 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion baselines/Google Chat Minimum Viable Secure Configuration Baseline v0.2.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -206,10 +206,11 @@ This section covers preventing ordinary users from being able to install Chat ap
### Policies

#### GWS.CHAT.5.1v0.2
User-level ability to install Chat apps SHALL be disabled.
User-level ability to install Chat apps SHOULD be enabled.

- _Rationale:_ Unrestricted access to Chat apps can expose the agency to potential vulnerabilities present in those apps or apps developed with malicious intent. This policy prevents unauthorized app installations and promotes the protection of sensitive information.
- _Last modified:_ July 10, 2023
- _Note:_ Common Controls only allows apps that our allowlisted to be installed

- MITRE ATT&CK TTP Mapping
- [T1195:002: Supply Chain Compromise](https://attack.mitre.org/techniques/T1195/)
Expand Down
Loading