Platform Capabilities to help upgrade to the Enterprise Standard / Plus
Using Context-Aware Access, you can create granular access control policies to apps based on attributes such as user identity, location, device security status, and IP address.
Using data loss prevention (DLP), you can create and apply rules to control the content that users can share in Google Drive files or Gmail outside the organization. DLP gives you control over what users can share, and prevents unintended exposure of sensitive information such as credit card numbers or identity numbers.
The password vaulted apps service can manage access to some of the apps that don't support federation and that are available to users on the user Dashboard.
As an administrator, you can set up company-owned and personal Microsoft Windows devices to use Google’s single-sign on (SSO) access security, push Windows settings, and wipe device data remotely. Enhanced desktop security for Windows has two complementary features that can be set up together or individually.
As an administrator, you can define rules to automate device management tasks and get security alerts. For example, you can automatically block devices that report suspicious activity.
Security controls that admins can use to protect sensitive company data on iOS devices
Restrict copy and paste on data belonging to G Suite accounts to other accounts. This can prevent corporate data from being exfiltrated to personal accounts.
Restrict the ability for users to drag and drop files from specific apps within their G Suite account.
The security health page allows you to monitor the configuration of your security-related Admin console settings—all from one location in the Google Admin console—and to make changes to those settings.
As an administrator, you can use the security dashboard to see an overview of different security reports. By default, each security report panel displays data from the last 7 days. You can customize the dashboard to view data from Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days).
As a super administrator, you can use the security investigation tool to identify, triage, and take action on security and privacy issues in your domain.
Work Insights is a reporting tool for G Suite that gives you insights into the impact of your G Suite deployment. Using easy-to-read charts, you can see metrics on your organization's G Suite adoption, productivity, and collaboration.
Email attachments can contain malicious software that might be missed by traditional antivirus programs. To identify these threats, Gmail can scan or run attachments in a virtual environment called Security Sandbox. Attachments identified as threats can be placed in users' Spam folders or quarantined.
You can enhance the integrity and confidentiality of your organization's email messages by enabling hosted Secure/Multipurpose Internet Mail Extensions (S/MIME).