Alert Management

Please follow the workflow illustrated below to understand the best practice for managing Nightfall Alerts for Google Drive
There are two main avenues of remediation for Google Drive files that include violations:
1. File Sharing Permissions
Controlling the file sharing permissions is the first step for Google Drive file remediation. You should first attempt to understand where this file has already been shared. From here, the goal is to restrict the file sharing as much as possible, especially externally. Following the workflow below is recommended, and should provide insight into the steps needed to ensure full remediation.
2. Shared Link Settings
The next step is control the sharing settings of the link. For Google Drive files, there are three options for link sharing settings - Restricted, Anyone in the organization with the link, or Anyone with the link.
The goal for remediation in this case, will be to first understand whether or not this file can be shared publicly, or can be shared to the level that it has been. The general rule of thumb to follow is that if the file link sharing setting can be restricted, then it should be restricted.
Alert Management Workflow for Google Drive