Deploying G Suite 2-Step Verification

 
 
2FA.png
 

Deploy 2-Step Verification today! 

Google has made the deployment of 2-Step Verification a breeze. We recommend 2-Step Verification (2SV) to all our clients. The most common threats faced today are phishing attacks and spear phishing attacks. While not 100% impenetrable, 2SV enhances the organization's overall security substantially. Here are a few basic deployment steps. 

Visit Admin.Google.com

You can find 2-Step Verification settings via Security > Basic Settings > Two-step verification. Visit the advanced settings link. 

 
Admin_console.png
 

Turn on Enforcement from date...

Depending on the size of your organization, you might consider giving users a few days to a few weeks to configure 2-Step Verification. Here you can also set your enforcement policy for new Users. It's important to consider new Users, if enforcement is enabled upon User creation a new User would be unable to access their account and configure 2SV - they're locked out by default. 

Create a 2-Step Verification 'Off' Organizational Unit

It's easy to create additional Organizational Units (OU) in G Suite. You'll want to create an OU and Disable 2SV. This gives you a place to move any Users who have issues with 2SV or anyone who misses your Enforcement dates. You can move Users into and out of this Organizational Unit as required. But don't use this OU as an excuse for lax policies, a User should not have to remain here indefinitely. 

Inform your Users

Send an email from a User that will get employees' attention. Depending on your organization, this might be your account or it might be the account of the CEO. 

To all employees. Starting this Friday morning, 2-Step Verification will be required on all accounts. This additional security will help protect our information from falling into the wrong hands. You'll need your smartphone and 2 minutes to enable 2-Step Verification. You can complete the steps found here. If you do not complete these steps, you will not longer be able to access your corporate Google account. If you have questions or require assistance, please email security@company.com 

You can configure security@ as a Group via Admin.Google.com for this project and other security related projects. Mobile Device Management (MDM) anyone? 

Did you do it?

That's it. You're done. You can do it today. Or tomorrow. Or next week if need be. Just get it on the Calendar and get it done!