Hi Community,
I am currently architecting a security hardening roadmap for a client using Google Workspace (upgrading from basic settings).
We are planning to implement Context-Aware Access and a Zero Trust model, but I am analyzing the potential friction with end-users (specifically in a Spanish-speaking non-tech environment).
My question for the experts here: In your experience, what are the most common "blind spots" or pitfalls when moving from a legacy setup to a Zero Trust model in GWS?
I'm interested in hearing about architectural challenges or specific configurations in DLP that you recommend prioritizing to avoid false positives during the transition.
Any advice or resources on this transition strategy would be greatly appreciated.
Thanks!