| Overview parameter | Description |
|---|---|
| Connected | Indicates if your organization's Google Workspace is connected to DoControl. If it's not indicated as connected, contact Customer Success. |
| Internal users | Number of users that belong to your organization and operate within the organization's domains. |
| External users | Number of users outside your organization with access to company assets, such as Google Drive files. |
| External domains | Number of domains with external users who have access to assets in your organization. |
| Assets | Total number of Google Workspace assets, with distribution between My Drive and shared drive assets. |
| Posture insight | Filtered results |
|---|---|
| Exposed sensitive assets | Google assets with a high sensitivity ranking that are shared publicly, externally or internally |
| High risk identities | Identities flagged as high risk based on behavior and access patterns, requiring ongoing monitoring |
| Assets shared with former employees | Google assets that can be accessed via a terminated employee's personal email. You need to be integrated with an HRIS to view this data. |
| Assets shared with employee personal emails | Google assets that can be accessed via a current employee's personal email. You need to be integrated with an HRIS to view this data. |
| Inactive sensitive assets exposed | Assets with a high sensitivity ranking that are shared publicly, externally or internally, and were not viewed or modified in the last 6 months. Externally-exposed assets do not include assets exposed to trusted domains. A domain that has been vetted and added to your trusted domain list is considered low-risk. |
| Assets shared with non-trusted corporate domains | Google assets that are shared publicly, externally or internally, and can be accessed by companies that are not in your trusted domain list |
| Encryption keys and certificates | Assets in Google Drive with encryption key extensions, and the number of externally exposed keys |
| Exposure description (Google status) | Total assets |
|---|---|
| Public assets open to the world (public) | Number of sensitive public assets out of the total number of publicly exposed assets |
| Assets shared with external collaborators (external) | Number of sensitive external assets out of the total number of externally exposed assets |
| Assets shared inside the organization (internal, and internal with link) | Number of sensitive internal assets out of the total number of internally exposed assets |
to see all external users with private domains. Click an external user to see all organizational assets they can access.
{% endhint %}
#### To remediate exposure to private domains:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Exposure by private email
Discover which current employees have the most access to your data via their personal email accounts. See the number of Google Drive assets that each personal email account has access to.
{% hint style="info" %}
The employee's personal email is retrieved from your HRIS (BambooHR, Deel HR, HiBob, SAP SuccessFactors, Workday).
{% endhint %}
to see all assets that are shared with the personal emails of current employees.
{% endhint %}
#### To remediate exposure to personal email accounts:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Assets exposed to corporate domains
Discover which corporate domains have the most access to your data. DoControl displays the number of Google Drive assets that each external company domain has access to.
Corporate domains do **not** include your trusted domains. A domain that has been vetted and added to your trusted domain list is considered low-risk.
to see all assets that are shared with external corporate domains.
{% endhint %}
#### To remediate exposure to corporate domains:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Exposure by corporate emails
Discover which corporate email accounts have the most access to your data. See the number of Google Drive assets that each corporate email account has access to.
Corporate emails do **not** include emails from your trusted domains. A domain that has been vetted and added to your trusted domain list is considered low-risk.
to see all external users with corporate emails. Click a user's work email to see all organizational assets they can access.
{% endhint %}
#### To remediate exposure to corporate email accounts:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Exposed highly sensitive assets
Identify the specific files and folders across your Google Drive that carry a high sensitivity ranking and are currently exposed — whether shared publicly, externally, or with unauthorized internal users. Filter the list by exposure type (**All**, **Public**, or **External**) to focus on the level of risk that matters most to you.
View each exposed asset alongside its exposure type, so you can quickly identify which sensitive files need immediate attention.
to see all Google assets with an encryption file extension.
* Click **externally exposed assets** to view all encryption keys that are shared externally or publicly.
{% endhint %}
#### To remediate exposure of encryption keys or certificates:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the relevant inventory action:
1. **Remove external collaborators**
2. **Change owner**
3. **Remove public sharing**
### Exposed Google labels
If your organization classifies documents with Google labels, you can discover your exposed Google assets according to badged label. Google labels enhance your DLP capabilities so you can know what files in your organization are sensitive and where they're located. With DoControl, you can mitigate data loss of your sensitive files.
See the number of Google Drive assets that are externally, publicly or internally exposed, per Google badged label.
to see all labelled Google assets that are shared publicly, externally, internally or via an internal link.
* Click a **Google label** or **asset total** to view all Google assets having that label that are shared externally, publicly or internally.
{% endhint %}
#### To remediate exposure of assets with Google labels:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the relevant inventory action:
1. **Remove external collaborators**
2. **Change owner**
3. **Remove public sharing**
## Data classification exposure
Understand what sensitive, classified data is exposed — publicly or externally — across your Google Drive environment. This section breaks exposure down by the type of data at risk, the category it falls into, and who outside your organization can access it, giving you a full picture of your data loss prevention (DLP) posture in one place.
to see all exposed Google assets that were not viewed in the last 6 months.
* Click a Google sharing status (**public, external, internal with link, internal**) or **asset total** to view all Google assets of that sharing status that were not viewed in the last 6 months.
{% endhint %}
#### To remediate exposure of inactive assets:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the relevant inventory action:
* **Remove external collaborators**
* **Remove org-wide sharing**
* **Remove public sharing**
### Domains with inactive collaborators
Discover which external domains have the most Google assets that were not viewed in the last 6 months.
DoControl displays the number of Google Drive assets with inactive collaborators.
Displayed domains do **not** include your trusted domains. A domain that has been vetted and added to your trusted domain list is considered low-risk.
to see all Google assets shared with inactive collaborators from external domains. These assets were not viewed in the last 6 months.
* Click an **external domain** or **asset total** to view all Google assets shared with that domain, but weren't viewed in the last 6 months.
{% endhint %}
#### To remediate exposure to inactive domains:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Inactive corporate collaborators
Discover which external corporate users have the most Google assets not viewed in the last 6 months.
DoControl displays the number of Google Drive assets that each external collaborator has access to.
Corporate emails do **not** include emails from your trusted domains. A domain that has been vetted and added to your trusted domain list is considered low-risk.
to see all Google assets shared with external collaborators that were not viewed in the last 6 months.
* Click an **external user** or **asset total** to view all Google assets shared with that user, but weren't viewed in the last 6 months.
{% endhint %}
#### To remediate exposure to inactive corporate collaborators:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
### Inactive private collaborators
Discover which non-corporate users have the most Google assets not viewed in the last 6 months.
DoControl displays the number of Google Drive assets that each private collaborator has access to.
to see all Google assets shared with private collaborators, but were not viewed in the last 6 months.
* Click an **external user** or **asset total** to view all Google assets shared with that user, but weren't viewed in the last 6 months.
{% endhint %}
#### To remediate exposure to inactive private collaborators:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the **Remove external collaborators** inventory action.
3. Select **Filtered collaborators only** to remediate your filtered results.
## Shared drive exposed assets
Discover which shared drives have the most exposed assets in your Google Workspace across all sharing statuses: public, external, internal, and internal with link. This helps you to focus on exposed areas in your organization.
to see all exposed Google assets across your shared drives.
* Click a **shared drive** or **asset total** to view all exposed Google assets in that drive.
{% endhint %}
#### To remediate exposure of shared drive assets:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the relevant inventory action:
* **Remove external collaborators**
* **Remove org-wide sharing**
* **Remove public sharing**
## My Drive exposed assets
Discover which personal drives have the most exposed assets in your Google Workspace across all sharing statuses: public, external, internal, and internal with link. This helps you to focus on exposed areas in your organization.
to see all exposed Google assets across your My Drives.
* Click a **My Drive** or **asset total** to view all exposed Google assets in that user's personal drive.
{% endhint %}
#### To remediate exposure of My Drive assets:
1. In your filtered Google asset inventory, select the relevant assets.
2. Click **Remediate** and select the relevant inventory action:
* **Remove external collaborators**
* **Remove org-wide sharing**
* **Remove public sharing**
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.docontrol.io/docontrol-user-guide/risk-management/posture/google-workspace-posture.md?ask=