Start here Why this matters Google Workspace often contains email, files, shared drives, calendars, forms, and customer information. If accounts and sharing are not reviewed, sensitive information can spread too widely. Use this resource when Your business uses Gmail, Google Drive, or shared drives. Employees share files outside the organization. 2-Step Verification is not required. You are not sure who has Google administrator access. What to review Active and suspended users. Google administrator roles. 2-Step Verification status. Shared drives and file permissions. External sharing settings. Recovery email and phone settings. Former employee accounts and file ownership.
Step by step Practical checklist Review active Google Workspace users. Confirm administrator roles are limited and documented. Require 2-Step Verification for users. Review shared drives and external sharing. Transfer file ownership when employees leave. Document settings that need cleanup.
Avoid these issues Common mistakes Letting files remain owned by former employees. Allowing broad external sharing. Not requiring 2-Step Verification. Giving too many users administrator access. Using personal Gmail accounts for business work.
Google Workspace Shared Drive Review Checklist Shared drives can keep business files organized, but only when ownership, permissions, and external sharing are reviewed.
Microsoft 365 Security Checklist for Small Businesses Use this checklist to review the Microsoft 365 settings that most small businesses depend on every day. It is designed for business owners and office managers who need a practical way to reduce account, email, and access risk.
How to Prepare for a Basic Microsoft 365 Security Assessment A Microsoft 365 security assessment does not need to be overwhelming. The goal is to understand what accounts exist, who has access, what protections are enabled, and which settings need cleanup.
