Cybersecurity and Infrastructure Security Agency Logo

Light mode

Google Chat Baseline Report

Customer Name Customer Domain Customer ID Report Date Baseline Version Tool Version
Cool Example Org example.org ABCDEFG 07/20/2026 12:43:08 PDT 1 v1.0.0
Policy Indicators:

CHAT-1 Chat History

Control ID Requirement Result Criticality Details
GWS.CHAT.1.1v1 Chat history SHALL be enabled for information traceability.
BOD 25-01 Requirement Automated Check
Pass Shall Requirement met.
GWS.CHAT.1.2v1 Users SHALL NOT be allowed to change their history setting.
BOD 25-01 Requirement Automated Check
Pass Shall Requirement met.

CHAT-2 External File Sharing

Control ID Requirement Result Criticality Details
GWS.CHAT.2.1v1 External file sharing SHALL be disabled to protect sensitive information from unauthorized or accidental sharing.
BOD 25-01 Requirement Automated Check
Pass Shall Requirement met.

CHAT-3 History for Spaces

Control ID Requirement Result Criticality Details
GWS.CHAT.3.1v1 Space history SHOULD be enabled for information traceability.
Automated Check
Warning Should The following OUs are non-compliant:
  • Cool Example Org: Conversation history settings for spaces is set to: ON by default (expected: ALWAYS ON)

CHAT-4 External Chat Messaging

Control ID Requirement Result Criticality Details
GWS.CHAT.4.1v1 External chat messaging SHALL be restricted to allowlisted domains only.
BOD 25-01 Requirement Automated Check
Pass Shall Requirement met.

CHAT-5 Content Reporting

Control ID Requirement Result Criticality Details
GWS.CHAT.5.1v1 Chat content reporting SHALL be enabled for all conversation types.
Automated Check Log-Based Check
Pass Shall Requirement met.
WARNING: from the log events alone, it is not possible to distinguish between an OU inheriting settings from its parent and content reporting being disabled entirely. It's possible this tool classified some child OUs as compliant due to this limitation; manual check recommended for child OUs due to this edge case.

GWS.CHAT.5.2v1 All reporting message categories SHOULD be selected.
Automated Check Log-Based Check
Warning Should The following OUs are non-compliant:
  • Cool Example Org: The following reporting types are disabled: confidential information, discrimination, explicit content, harassment, other, sensitive information, spam
  • Mark Ponce's OU: The following reporting types are disabled: confidential information, discrimination, explicit content, harassment, other, sensitive information, spam