Google LLC is shoring up security for G Suite and Cloud Identity customers with updates that should help them to keep a lid on both device management and access control.

In a blog post today, Google product managers Vidya Nagarajan and Brad Meador explained that one of the best ways for businesses to keep their data safe is by securing the devices used across their organization.

To ensure that happens, Google said it’s automatically enabling “basic device management” for each desktop device that accesses G Suite within an organization.

That should benefit information technology administrators in several ways, Nagarajan and Meador explained. For one thing, it means they’ll have a clear view of all of the devices that can access corporate G Suite data from a single dashboard. They’ll also gain the ability to remotely sign out users from each desktop device should it become lost or stolen. Lastly, basic device management allows multiple user accounts to be managed on the same device, which should be useful for workers who often share devices.

In a second update, Google is enabling what it calls “context-aware” access controls for G Suite Enterprise customers based on its “zero trust” security model, sometimes called “BeyondCorp.”

Generally available today, context-aware access controls enable companies to control dynamically who can access its G Suite applications. Access is granted based on not just the user’s identity, but also the context of their request, such as their IP address, device security status and so on, to safeguard against user credentials being stolen. Context-aware access also provides more granular controls for different organizational units within a company, enabling admits to streamline access to specific apps by setting policies.

“If you’re wondering what types of access controls can be enforced through context-aware access, here are some examples: 1) only allowing users from a corporate-owned device and a corporate IP address to access your organization’s Google Drive, 2) only allowing a “high trust” group to access Drive when not on a corporate IP address, or 3) only allowing users with an encrypted device and a screen lock enabled to access Gmail,” Nagarajan and Meador wrote.

The third update today pertains to Google’s G Suite Security Center, which provides analytics services for companies that want to assess any security threats and investigate and take action on any issues that might come up. As of today, security admins can now create automated rules that prompt “remediative actions” or send notifications to the alert center, should certain conditions be met.

“This makes it possible for teams of admins and analysts to collaborate on security investigations instantly based on alerts, and makes it easier to assess and manage threats with automated actions and improved tracking,” Nagarajan and Meador said.

Analyst Holger Mueller of Constellation Research Inc. told SiliconANGLE that today’s updates, although minor, are all positive steps by Google, which understands that great software platforms are not built overnight.

“Better endpoint management helps manage an increasingly on-the-go workforce,” Mueller said. “Making access to G Suite more granular and intelligent also matters to Google customers, and so does better security automation. Today’s updates might not grab headlines, but they demonstrate solid execution by Google on what matters to its customers.”

Google said today’s updates will be rolled out to all G Suite Enterprise customers over the next two weeks.

Images: Google