Improve
Google Workspace security
Configure Google Workspace securely, around how your team works.
We review your Google Workspace admin settings — administrators, 2-Step Verification, apps, Gmail, sharing and devices — agree the changes that matter, make them with your IT provider and verify each one. Changes are planned around your integrations and workflows, and we tell you where a control depends on your Workspace edition.
Request a quote- Price
- Quoted on scope
- How you can engage us
- One-off project · Ongoing service · Project, then ongoing
- Delivered by
- Cyber Guys
- Review cadence
- Quarterly when continued as an ongoing service
Who it is for
Businesses that run email, files and collaboration on Google Workspace and want it configured securely, with evidence that it is.
Scope
Your Google Workspace organisation — the Admin console, Gmail, Drive and shared drives, third-party app access and endpoint management — as agreed in the scope.
What is included
- Super administrator and administrator role review, with separate accounts for administrative work
- 2-Step Verification coverage and the enforcement options available in your edition
- Account lifecycle: joiners, movers, leavers, suspended and dormant accounts
- Third-party app access controls and review of OAuth access already granted
- Gmail automatic forwarding settings and review of forwarding and routing rules
- Drive and shared drive sharing settings and external access
- Audit logs and reports available in your edition, confirmed as reviewed and retained
- Endpoint management settings for supported devices
- Recovery arrangements for super administrator accounts
- Verification of each change, with the evidence recorded
What is not included
- Work outside the agreed scope, which is quoted separately
- Purchasing or upgrading Google Workspace editions
- Data or mailbox migrations
- Rebuilding, wiping or re-enrolling devices
- Changes inside third-party applications that connect to Google Workspace, beyond identifying the dependency
- Incident response to an active compromise
How delivery works
- 01
Discover
We review admin roles, 2-Step Verification enrolment, connected apps, Gmail forwarding, sharing and device settings, and list the integrations that depend on them.
- 02
Prioritise
We agree an ordered list of changes, with the business impact, edition dependency and rollback for each.
- 03
Implement
Changes are made in stages, starting with a pilot group where the setting allows it, inside agreed change windows.
- 04
Verify
We check each change against admin settings and audit logs. Anything that does not pass is reopened, not closed.
- 05
Maintain
Optional: an ongoing service reviews the settings on a schedule and flags new administrators, apps or settings that have drifted.
Who does what
You
- Name a decision-maker who can approve changes
- Provide a named administrator account for the engagement (never a shared password)
- Tell us about apps, devices and integrations that connect to Google Workspace
- Let staff know about changes that affect how they sign in
- Approve or decline each proposed change
Cyber Guys
- Review the Workspace configuration and explain the findings
- Confirm which controls your edition supports before proposing them
- Plan each change with its business impact and rollback
- Make or coordinate the agreed changes in stages
- Verify each change and record the evidence
Your IT provider or partner
- Your IT provider, where they manage Google Workspace or devices, makes or approves changes and confirms the result
Access we need
- A named administrator account with the privileges needed for the agreed work, created by you or your IT provider
- Access to the Admin console reports and audit logs
We never ask for your password. Access is through a named account that you or your IT provider create for the engagement, and can remove at any time.
Dependencies and licences
- Some controls depend on your Google Workspace edition, including context-aware access, advanced endpoint management and some security and audit features; we confirm what your edition includes before proposing a change
- Endpoint controls apply only to devices enrolled in Google endpoint management
What you receive
- Workspace findings report
- Connected app and integration register
- Prioritised change plan with business impact and rollback
- Change log with verification results
- Evidence pack and handover report
How we know it is finished
- Every agreed change is verified, failed and reopened, or recorded as an exception you accepted
- Super administrator recovery arrangements are documented and checked
- The handover report and evidence pack are delivered
Related services
Security baseline and uplift
Find the gaps, fix what matters, prove it is done.
Quoted on scopeRequest a quoteEmail security and fraud protection
Make your domain harder to spoof and payment fraud harder to pull off.
Quoted on scopeRequest a quoteEssential Eight uplift
Know your Essential Eight maturity, and lift it to the level you choose.
Quoted on scopeRequest a quote
Request a quote for Google Workspace security
Tell us a little about your business. We will arrange a short scoping call to agree what is in scope and send a written quote. The call is about scope and price — it is not free security advice.