6 Best Practices of Google Drive Data Loss Prevention You Must Know

Need Of Google Drive Data Loss Prevention

Google Drive Data Loss Prevention Best Practices

1. Set up a DLP friendly Drive Infrastructure:

Start by discovering which files lie in personal or ‘My Drives’ and should be moved to ‘Shared Drives‘ and the other way around. Then, move those documents to the ‘secured’ place in your Drive.

You may likewise have to be sure whether it’s better to create any shared drive with a folder for every space or one shared drive for every space? — It would help make your upcoming Drive Audit tasks simpler.

2) Check Drive Access and File Ownership:

Once you have structured your drive, proceed to file ownership and access management.

It’s because you can’t secure your most important information from being lost or spilled without knowing who possesses which files and who can access them.

In case of sensitive documents, you need to consistently review your organization’s Google Drive to permit and change file ownership and access rights to the authentic users.

Lock important documents:

You may likewise consider ‘Locking’ your most valuable Docs. There are two different ways to do that:

i) By Encrypting Docs: Google has not yet provided personal password protection for documents. But you can encrypt them on your PC and upload them using.

Google’s backup and sync desktop program. The disadvantage of this method is that you cannot edit these files in Google Docs (or the cloud).

ii) By Security Management Tool: The third-party tools that allow you to work “in the cloud”. They operate on the principle that access to Docs or change of the ownership of Docs, without the owner’s knowledge or authorization, can only be done through the input of two individuals in the organization.

3) Keep an Eye on Google Drive Activity:

By checking Drive activity you can catch suspicious behaviors like unusual Drive downloads, increased internal or external sharing or deletions, etc.

How Can You Monitor Drive Activity for DLP?

i) Visit and review the reports of Data security experiences and File Sharing Exposure in your Admin console reliably.

ii) Alternatively, you can use third-party tools for more significant Google Drive Data Loss Prevention surveys beyond the admin control center, with just single click insights.

4) Block off the leavers:

  • There is a high chance of essential data loss due to suspended accounts of leavers. Likewise, unfairly suspended accounts regularly can cause around 60–70% of information accessibility issues.

● You must be sure that leavers have no access to important Drive once they leave. This can make critical DLP threats, particularly if they use it malevolently.

5) Have a DLP strategy for files shared outside:

The role of a strong Google Drive Data Loss Prevention strategy is to control what users share with outside parties as well as prevents the accidental exposure of important data. For example, organization card details and social security numbers (SSN), etc.

6) Configure Google Drive DLP Alerts:

It assures 3600 drive protection without any need to manually run audit scans.

Apply these 2 ways Drive DLP Alerts:

i) For the enterprise; Enterprise for Education version, you can use DLP rules to scan and protect Drive files, including Google Sheets, slides, and documents.

ii) Set up Real-time Google Drive DLP actionable alerts for files with specific content shared outside the domain. It helps you to act faster and deal with unexpected data mishaps.




Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
CloudCodes Software

CloudCodes is a cloud security solution provider founded in 2011. We focus on providing cloud security solutions to enterprise customers through its SSO.