Cis Gworkspace 3.1.7.1

---
name: cis-gworkspace-3.1.7.1
description: "Ensure service status for Google Sites is set to off"
category: cis-gworkspace
version: "1.3.0"
author: cyberstrike-official
tags: [cis, gcp, google-workspace, sites, permissions]
cis_id: "3.1.7.1"
cis_benchmark: "CIS Google Workspace Foundations Benchmark v1.3.0"
tech_stack: [gcp, google-workspace]
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: {}
---

# 3.1.7.1 Ensure service status for Google Sites is set to off

## Level

L1

## Profile Applicability

- Enterprise Level 1

## Type

Manual

## Description

By default turn off Google Sites for all users.

## Rationale

There is really no reason for every user within an organization to have access to Google Sites. If this capability is needed, it can be enabled and configured for those users and groups by exception as required by the organization to meet specific needs.

## Impact

Users will not be have access to Google Sites.

## Audit

To verify this setting via the Google Workspace Admin Console:

1. Log in to `https://admin.google.com` as an administrator
2. Select `Apps`
3. Select `Google Workspace`
4. Select `Sites`
5. Select `Service status`
6. Verify `Service status` is `OFF for everyone`

## Remediation

To configure this setting via the Google Workspace Admin Console:

1. Log in to `https://admin.google.com` as an administrator
2. Select `Apps`
3. Select `Google Workspace`
4. Select `Sites`
5. Select `Service status`
6. Set `Service status` to `OFF for everyone`
7. Select `Save`

## Default Value

`Service status` is `ON for everyone`

## CIS Controls

| Controls Version | Control                                                                         | IG 1 | IG 2 | IG 3 |
| ---------------- | ------------------------------------------------------------------------------- | ---- | ---- | ---- |
| v8               | 4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and Software |      | x    | x    |
| v7               | 9.2 Ensure Only Approved Ports, Protocols and Services Are Running              |      | x    | x    |

## Profile

Level 1