The purpose of this memorandum is to notify the GSA Administrator of an issue that warrants immediate attention. During the initial phase of our Audit of Security Controls for GSA’s Google Shared Drives, we found documents on GSA’s Google Drive that contain sensitive information. Because these documents are accessible by all GSA Google Drive users, including contractors, the sensitive information is exposed to users who do not have a legitimate business need to know.
Issue Date
