Latihan Google

Workspace for Education

Date: 25-11-2021
Perutusan Bahagian Pengurusan
Maklumat

YBrs. Ts. Azlina Azman

#Bett2018
Agenda

1. Google Workspace Collaboration - 30 minutes

2. Google Workspace Security - 10 minutes
Google Personal akaun

Dengan akaun Google personal, anda masih lagi boleh menikmati pelbagai aplikasi menarik
Google seperti Google Form, Google Classroom dan sebagainya.
Namun begitu, mengapa anda masih memerlukan pakej G Suite for Education daripada Google?
Ini antara sebabnya:
1. Dapat storan awan G Drive tanpa had berbanding 15GB untuk akaun personal.
2. Akaun yang lebih personal seperti nama anda@organisasianda.edu.my.
3. Kawalan pengguna hanya oleh pentadbir sistem di organisasi anda.
4. Sokongan daripada Google menerusi program Google for Education.
5. Menikmati pelbagai aplikasi baharu lain hanya untuk pengguna G Suite.
Google telah mengumumkan bahawa G Suite for Education kini ialah Google Workspace for Education.

Google Workspace for Education Plus ialah nama baharu untuk G Suite Enterprise for Education. Ini
termasuk semua ciri daripada Asas Pendidikan, Standard Pendidikan, peningkatan Pengajaran dan
Pembelajaran dan banyak lagi.

Google secara tradisinya menawarkan

● storan tanpa had edisi Google Workspace for Education.
● storan yang mencukupi untuk lebih 100 juta dokumen,
● 8 juta pembentangan atau
● 400,000 jam video.

Untuk memperkasakan pentadbir menyesuaikan diri dengan model ini dan mengoptimumkan storan
mereka, Google akan menyediakan alatan untuk mengenal pasti dan mengurus cara storan digunakan .

Perbezaan antara g suit biasa, standard dan enterprise

https://apps.google.com/intl/en/meet/pricing/ Perbandingan akaun Enterprise
https://workspace.google.com/pr
icing.html

G SUIT FOR EDUCATION

 Google Workspace Collaboration

Google Workspace for Education, yang sebelum ini dikenali sebagai G

Suite for Education, menawarkan alatan yang mudah dan fleksibel supaya
komuniti sekolah anda boleh bekerjasama dengan lebih baik, mengurus
kelas dan mewujudkan persekitaran pembelajaran yang selamat. Kemas
kini terbaharu kami termasuk kerjasama yang dipertingkatkan merentas
produk kami dan peningkatan keselamatan untuk semua pelanggan
Google Workspace for Education.
https://edu.google.com/products/workspace-for-education/editions/
Delima Delima Public Paparan aplikasi yang terdapat dalam menu delima
Bagaimana cipta Profil di dalam browser
chrome.
https://support.google.com/a/users/answe
r/9310451?hl=en&ref_topic=9290441
Bagaimana reset password id delima
https://support.google.com/a/answer
/182076?hl=en

Sign in admin console:

https://admin.google.com/ac/users
Pengenalan Tugasan
https://edu.google.com/assignments/
KALENDER
https://calendar.google.com/calendar
/u/0/r
Ruang Komunikasi
https://mail.google.com/chat/u/0/#cha
t/welcome
Kelas Maya
https://classroom.google.com/h
Bagaimana Menggunakan Google For
m
https://mail.google.com/mail/u/0
/#inbox
Bagaimana guna JAMBOARD
https://jamboard.google.com/
Tinggalan nota ringkas secara virtual
https://keep.google.com/u/0/#home
Komunikasi Maya secara atas talian
https://meet.google.com/
https://www.google.com/sheets/abo
ut/
Laman Interactive
https://sites.google.com/new?tgif=d
Pembentangan secara ‘slaid’
https://www.google.com/slides/about/
Paparan Bumi 3D dimensi
https://earth.google.com/web/

Peta Jalan (Google Maps)

https://www.google.com/maps
Smart canvas: the next evolution of collaboration
 LAUNCH: DEPENDS ON
FEATURE

Smart canvas

A new experience that enhances collaboration in the apps

 
that you use every day — like Docs, Sheets, and Slides
— by making them even more interactive and intelligent.

Feature availability depends on edition

 LAUNCH: LIVE

Smart chips

Type the “@” sign to pull in helpful information from

 
other Google Workspace products while working in a
document. Quickly embed files from Drive or tag other
people.

Education Fundamentals
 LAUNCH: LIVE

Interactive checklists

Stay on track with whatever you’re working on.

 
Checklists are similar to bulleted lists, except you can
mark items once they are complete

Education Fundamentals
 LAUNCH: IN THE COMING
MONTHS

Table templates

Topic-voting table templates let you easily gather

 
feedback directly in docs.

Education Fundamentals
 LAUNCH: LATER THIS YEAR

Writing tips

Get warnings about offensive words and language, as

 
well as other stylistic suggestions. Admins can easily turn
this off if they prefer not to have it on in their domain.

Education Plus
 LAUNCH: LATER THIS YEAR

Assisted analysis

Assisted analysis in Sheets will provide formula

 
suggestions that make it easier for everyone, not just data
analysts, to derive insights from data.

Education Plus
 LAUNCH: LIVE

Present to Meet from Docs,

Slides and Sheets
Easily present your content to Google Meet directly from
 
Docs, Sheets, and Slides with the click of a button.

Education Fundamentals
 Proprietary + Confidential

Quick links

Education OnAir Education OnAir Teacher Center

Watch our Global Distance Learning Getting Started: Week 1 of Distance Guide to distance learning at our
webinar series Learning Teacher Center
 Proprietary + Confidential

Teacher Center

Distance learning training

Go deeper on topics like distance learning with free
trainings built for teachers, by teachers.

Training topics:

● Increase opportunities ● Think beyond the clock

● for engagement ● Distance learning without
● Frequently assess internet access
Distance learning training for educators g.co/TeacherCenter
● student learning ● Communicate your plan with
families
● Extend your reach with Google
Meet
● Include social-emotional
learning (SEL) in your design
 Proprietary + Confidential

Teacher Center

Getting started with our tools

Our new Teacher Center helps educators go from “how do I get
started?” all the way to “I’m ready to get certified.”

New product guides in our Teacher Center to help educators

get started now:

Classroom Docs Forms

The EDU Teacher Center
Google Meet g.co/TeacherCenter
Slides Sites
Jamboard
Sheets CS First
 Proprietary + Confidential

Teacher Center

Step-by-step instructions and

community support

Find step-by-step instructions at our Help Center, post a question

in the Help Community, or join the conversation via Twitter and
Facebook.

Visit the Help Centers for assistance:

The EDU Teacher Center
g.co/TeacherCenter
Classroo Meet
m
Chrome Google for Education Google for Education

Docs
@GoogleforEducation
@GoogleForEdu

Chromebook Speak with us on Twitter

Speak with us on Facebook

Assignme
nts
Security on Google Workspace
What features security features come with Google Workspace?
What features are important to me?
ADAKAH ANDA TAHU AKAUN
ANDA TELAH DIBUKA DAN
DIGUNAKAN OLEH
SESEORANG?????
https://myaccount.google.com/
Google authentication with 2-step verification
Authentication overview

Summary
● Google recommends security keys for best in class security
○ Supports tokens using Universal Second Factor (U2F)
● Software verification codes are received via:
○ Text message / phone call
○ Android/iPhone mobile application
○ Tap a prompt that Google sends to your mobile phone
Pros
● 2SV adds critical protection against compromised passwords
● Zero reported account hijackings after security key deployment
● Admins can enroll security keys on behalf of users

Cons
● NFC security keys not supported with iOS (BLE supported)
● Not currently compatible with SAML 2.0 (SSO)

© 2019 Google LLC. All rights reserved.

Google 2SV best practices
Authentication overview

2SV adds critical protection against phished, compromised, and reused passwords

● Enable at the domain level

Administration ● Enforce at the OU level with exception groups
● Recommend security keys for higher level of protection

● Enable user enrollment to provide lead time and reminders

Enrollment ● 2SV should be enforced for admin accounts, executives, and all users
● Users can be tracked through enrollment reports

● Define support policy and process for locked-out users

User support
● Delegate security roles to help desk administrators to resolve locked out users

● Avoid using app passwords when possible

App passwords ● Users will be able to self-create an app password when 2SV is enabled
● Admins can review and revoke app passwords on security tab

© 2019 Google LLC. All rights reserved.


Data loss prevention (DLP) Rules (1/2)
DLP for Gmail and Drive:
Protect sensitive company data by preventing
users from sharing outside the organisation
● Block or warn on external access
● DLP templates utilising predefined content detectors
● Sends an email to super admins when a user creates,
edits, or uploads a file with sensitive content.
● Custom rules with keywords and regular expressions
● Optical Character Recognition (OCR)
● Nested conditions with AND, OR, and NOT
● Volume-based detection
● Finer detection thresholds
DLP Incident Management dashboard:
Get alert delivery options and integration with
policy investigation tools
● Dry Run” for your data protection rules
● New alert delivery options
● Detailed incident reports
● Integration with policy investigation tool
Proprietary + Confidential
Storage and Security
Controls
Simple deployment:
With role-based access, predefined content
detectors, and policy exports for admins
● Roles-based access for administrators - Assign
delegated admins for DLP functions in the Admin
console. Learn more.
● Predefined content detectors - Use 90+ predefined
content detectors to help expand coverage and better
manage policy violations
● Policy exports - Download a copy of DLP policies
● Flexibility for scoping policies - Scope DLP policies
to include or exclude specific groups or OUs

Data loss prevention (DLP) Rules (2/2)
Prevent data leaks on Mobile Devices:
Mobile Device data protection
● Restrict copy and paste on data belonging to Google
Workspace accounts to other accounts. This can
prevent corporate data from being exfiltrated to
personal accounts
● Restrict the ability for users to drag and drop files
from specific apps within their Google Workspace
account
DLP Incident Management dashboard:
Admin setting for IRM in the DLP rule
creation workflow
● Users will see new notifications on affected files
● Automatically restrict the ability to download,
print, and copy sensitive documents through data
loss prevention (DLP) rules
Proprietary + Confidential
Storage and Security
Controls
Simple deployment:
Create granular access control policies to apps
based on attributes such as user identity, device
security status, and IP address
● Get visibility into a user’s devices accessing
Workspace apps, and deploy endpoint verification to
learn more about device attributes
● Use device context to enable continuous secure
access to GWS from personal laptops
● Enable secure sign-in to SAML apps like Salesforce
from personal laptops for select employees
 Proprietary + Confidential

Storage and Security

Google Vault - Introduction Controls

● Data retention and eDiscovery for Google Workspace

● Protect data and stay covered

● Retrieve valuable information even from suspended accounts

● Provide legal team what they need to be prepared

● Allows data preservation from specific Google Workspace apps

 Proprietary + Confidential

Storage and Security

Google Vault - Supported data types Controls

Service Manage retention Hold Search and export

Gmail Available Available Available

Groups Available Available Available

*Drive (supported file types) Available Available Available

Google Chat (with history on) Available Available Available

Classic Hangouts (with history on) Covered by retention on Google Chat Covered by holds on Google Chat Use Gmail search and export

Covered by Use Drive

Google Meet Available
holds on Drive search and export

Enterprise device and fundamental endpoint management
Including Windows
Device management and control device:
With fundamental desktop management get more
control over all desktop devices which are
automatically enabled, meaning employees don’t
have to install agents or profiles on Mac, Windows,
Chrome and Linux devices.
● Monitor corporate data access in a single dashboard
● Remotely sign out from stolen or lost devices
● Multi-user management on single device
● Admin task no longer needs connecting with
corporate network
Password Vaulting:
Single sign-on for apps that don’t support modern
authentication standards like SAML and OIDC.
The combination of standards-based and
password-vaulted app support will deliver one of
the largest SSO app catalogs in the industry
● Securely manage credentials in a single space,
enable access to shared credentials
● Manage access based on group membership
● Generate insights on credentials usage
Proprietary + Confidential
Identity Management
Secured LDAP service:
Simple and secure way to connect LDAP-based
application and services to Google
Workspace/Cloud Identity
● Manage LDAP clients from the LDAP page in the
Google Admin console
● Connect LDAP-based apps/services to Google
Workspace or Cloud Identity

Security and application management
Set password requirements for
managed mobile devices
Set the type of mobile management and password
requirements for mobile devices in your
organisation and enforce security policies, such as
data access methods, encryption, device approval,
and strong passwords
Apply settings for Android mobile
devices
Control how users access and interact with their
Android device by applying policy settings
Proprietary + Confidential
Advanced endpoint and
device management
Apply universal settings for mobile
devices and endpointS
Set the type of mobile management and password
requirements for mobile devices in your
organisation and enforce security policies, such as
data access methods, encryption, device approval,
and strong passwords
Manage mobile apps for your
organisation
Control which apps Android and iOS device users
can find and install for work or school by adding
them to the Web and mobile app list in the Google
Admin console. Add public apps—such as third-
party apps for security, business, and document
management—and private Android apps
 Proprietary + Confidential

Advanced endpoint and

Device Management device management

Maintain devices inventory to track details such as device type and who the device is assigned to
Generate detailed reports: information on attributes like device type and operating system), device security, user information, and
installed apps.

Configure Approve Block Remotely wipe device

● iOS: Integrate Apple Business
Manager with admin console
to directly push configurations
from Google endpoint
management
● Zero touch android
enrollment: configure online
with pre enforced
organization’s policies
● Auto approvals
● iPhones and iPads access wifi
network with pending
approval
● For endpoint verification
devices, users can access
Google data before approvals
unless specifically restricted
through Context-Aware Access
policy
● Approve, block, unblock, or
delete a device
● Remove corporate data from a
through Google Admin
console
● Depending on the device
platform, admin can wipe
user’s work account, profile,
or opt ‘factory reset’
● Users can access data vua sign
on computer, a web browser,
or authorized device
 Proprietary + Confidential

Enterprise endpoint and

Enterprise endpoint and device management device management

Apply settings for iOS devices Selectively distribute mobile apps

Decide how people use their work account on Distribute an app to some people in your
managed iPhones and iPads organisation with different app settings to different
people

Add company owned devices to the Get a report of inactive company

inventory devices
Keep an inventory of the computers and mobile Get a monthly report of unused company-owned
devices your company owns to track details Android devices that haven’t synchronised any
work data in the last 30 days
 Proprietary + Confidential

Share files from Google Drive

https://support.google.com/drive/answer/2494822?hl=en&co=GENIE.Platform
%3DDesktop

https://drive.google.com/drive/u/0/
my-drive
Feedback! We wanna hear from you!

Borang Maklumbalas Latihan GSEfE Bangsar/Pudu

shorturl.at/fgrCU
KEHADIRAN LATIHAN 25/11/20121

shorturl.at/blJT5