AI Image
CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
CyberSecurityNews • • technology
Key Points:
- The U.S. Cybersecurity and Infrastructure Security Agency (CISA) offers two free tools, ScubaGear and ScubaGoggles, to help organizations identify security misconfigurations in Microsoft 365 and Google Workspace by comparing settings against recommended security baselines.
- ScubaGear assesses Microsoft 365 environments, including services like Entra ID and Exchange Online, using PowerShell and Open Policy Agent to generate detailed reports in multiple formats, but it does not automatically fix issues.
- ScubaGoggles evaluates Google Workspace settings via Google APIs and Open Policy Agent, producing reports while cautioning users that the tool is in alpha and results may require careful validation.
- These tools are part of CISA’s Secure Cloud Business Applications (SCuBA) project, which aims to address cloud security gaps and primarily supports federal agencies but is available to all organizations.
- The tools encourage continuous security monitoring and configuration review, helping organizations track improvements and manage risks without guaranteeing immunity from cyber threats.
