G Suite now offers more enterprise-grade controls for users as Google continues to work towards bringing the best security possible to their products and services. Since G Suite is aimed at businesses, Google has been keen to focus on making sure that anyone who uses the collection of Google productivity and collaboration services is able to protect their sensitive data and while G Suite already offered some security controls it never hurts to have more, and this is where today's update to G Suite comes in.
As part of the new security changes Google has added a way for users to keep from losing important data by incorporating Data Loss Prevention features into Google Drive, so that companies have a little more control over information that's shared through the service. Administrators can now essentially scan files that are stored in Drive and be alerted to which files contain any sensitive information. With that knowledge they can more easily control the flow of files to and from other users, but the DLP also allows them to control what sorts of information can be stored in files, as well as prevent users from sharing something with sensitive details accidentally.
Another security measure being given to admins is the ability to enforce security key use, meaning that users won't be able to login to specific accounts unless they have a security key that was added to the account. In addition to restricting usage to security key holders, admins can also see reports that contain usage details so they know particular information such as when a security key may have logged in, how often it was used and so on. This paired with the usage enforcement for logins and the ability for admins to easily manage who receives a security key will be just one step in helping to prevent unauthorized access to accounts. In addition to the security key enforcement and the Data Loss Prevention for Google Drive, G Suite has other new enterprise-grade controls as well, such as adding BigQuery integration into Gmail Logs. With this control admins will have a bigger analytical overview of company data and how it's being used by employees. Google is also adding in third-party email archiving and an option where admins can enforce the use of S/MIME for Gmail.