Skip to content

Back to the catalog

cisa.govarticle

CISA Publishes Significant Updates to ScubaGear and ScubaGoggles

ScubaGear v2.0 and ScubaGoggles v1.1.0 are CISA's updated SCuBA assessment tools for Microsoft 365 and Google Workspace secure configuration baselines. ScubaGear now uses direct REST API calls, adds Power BI coverage, a consolidated Security Suite baseline and app severity scoring. ScubaGoggles adds a GUI, Policy API integration and Gemini controls. The release supports BOD 25-01 compliance.

TL;DR CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0 with restructured M365 and Google Workspace configuration baselines.
Open original ↗

Organisations named here

  • BOD 25-01
  • CISA
  • SCuBA
  • secure configuration baselines

Technologies named here

  • Microsoft 365
  • Google Workspace
  • Google Gemini
  • Power BI
  • Defender
  • Exchange Online
  • Teams
  • Gemini
  • Binding Operational Directive (BOD) 25-01
  • Google Policy API
  • Purview
  • ScubaGear
  • ScubaGear v2.0
  • ScubaGoggles
  • ScubaGoggles v1.1.0
  • Secure Cloud Business Applications (SCuBA)
  • Secure configuration baselines (SCBs)

Techniques named here

  • Risk-based application prioritization
  • Secure configuration baseline assessment

Related in Cloud & Infra