Google Workspace launches additional security controls empowered by AI

Google renowned for its unwavering commitment of innovation, this tech giant has consistently redefined the way we navigate the digital space. With a reputation built on groundbreaking solutions and a commitment to user experiences, Google stands as a beacon of technological prowess.

Google recently unveiled a new AI-powered security feature for its Workspace customers which focuses on zero trust, digital sovereignty, and threat defense. The AI-driven zero trust capabilities give organizations control over data access and usage. Google's AI can now classify and label files in Google Drive, implementing controls according to the organization's security policies to safeguard data and prevent unauthorized sharing.

Context-aware DLP controls will enable administrators to define specific requirements before users can share sensitive content in Drive. This feature, coming later this year, will be available for preview. Gmail will also receive enhanced DLP controls for better management of sharing sensitive information, both within and outside the organization. This preview feature is set to be launched later in the year.

Google introduced digital sovereignty controls to counter unauthorized data access. These controls include measures such as encryption key storage, data processing location selection, and restricted Google support access. To protect against third-party data access, Google is enhancing client-side encryption (CSE) with support for mobile apps in Google Calendar, Gmail, and Meet, as well as features like viewing, editing, or converting Excel files.

Google Workspace will soon allow organizations to make CSE default for certain units, offer guest access support in Meet, and facilitate comments in Docs.

In collaboration with Thales, Stormshield and Flowcrypt, Google enables CSE customers to store encryption keys in their preferred country. To strengthen defenses against account takeovers, Google will make two-step verification (2SV) mandatory to select administrator accounts of resellers and major enterprise customers. There would be an introduction of multi-party approval for sensitive administrator actions (in preview). Google's commitment to security and innovation shines through these enhancements.