External invitation warnings are enabled for Google Calendar
calendar_external_invitations_warning
The domain-wide Google Calendar configuration warns users when they invite guests from outside the organization to an event. This prompt gives users a chance to reconsider before sharing meeting details with external parties, reducing the likelihood of accidental information disclosure through calendar invitations.
Risk
Without external invitation warnings, users may unintentionally include external guests in internal meetings, exposing confidential meeting details, agendas, and internal attendee lists to unauthorized parties. This is a common vector for inadvertent data leakage through everyday calendar actions.
prowler googleworkspace --checks calendar_external_invitations_warning
Recommendation
Enable external invitation warnings so users are notified whenever a meeting invitation includes guests outside the organization. This simple prompt helps prevent accidental disclosure of meeting details to unintended recipients.
Remediation
- Sign in to the Google Admin console at https://admin.google.com
- Navigate to Apps > Google Workspace > Calendar
- Click Sharing settings
- Under External invitations, check Warn users when inviting guests outside of the domain
- Click Save
Source Code
Resource Type
NotDefined
References
Related To
- calendar_external_sharing_primary_calendar
- calendar_external_sharing_secondary_calendar