| 📝 Access Approval is not enabled 🟢 | 1 | 🟢 x6 |
| 📝 Consumer Google Accounts are used 🟢 | | 🟢 x3 |
| 📝 Google Accounts are not configured with MFA 🟢 | | 🟢 x3 |
| 📝 Identity Aware Proxy (IAP) is not used to enforce access controls 🟢 | | 🟢 x3 |
| 📝 Organization Administrator Security Key Enforcement is not enabled 🟢 | | 🟢 x3 |
| 📝 Organization Essential Contacts is not configured 🟢 | 1 | 🟢 x6 |
| 📝 Roles related to KMS are not assigned to separate users 🟢 | 1 | 🟢 x6 |
| 📝 Service Account has admin privileges 🟢 | 1 | 🟢 x6 |
| 📝 Service Account has User-Managed Keys 🟢 | 1 | 🟢 x6 |
| 📝 Service Account User-Managed Key is not rotated every 90 days 🟢 | 1 | 🟢 x6 |
| 📝 User has both Service Account Admin and Service Account User roles assigned 🟢 | 1 | 🟢 x6 |