Skip to content

Running checks on your systems

How a company adds a check on a connected system, reads its result, records a correction and asks for a fresh read, handles an exception, and downloads the record.

Updated

A check reads one of your connected systems every day and says whether a setting you rely on is in place. Today a check reads your Google Workspace administrators and confirms that two-step verification is enforced for the active ones.

Who can do this

  • An owner or editor can add a check, change its settings and propose an exception.
  • An owner or editor can record a correction and ask for a recheck on any check. A contributor can do this only on a check they own.
  • An owner or editor other than the person who proposed an exception reviews it.
  • Anyone who can export records can download a check's record.

Before you start

The system has to be connected as a managed system first. Without one, there is nothing for a check to read through. Record it under Connected systems and arrange its managed setup.

Find it

Open Checks in the sidebar, under Connections & trust. Each check shows its result, how many administrator settings are enforced, and who owns it.

Add a check

  1. Press Add a check.
  2. Give the Check name.
  3. Choose the Connected system.
  4. Enter the Google customer ID. You find it in the Google Admin console, under Account settings. It starts with a capital C, such as C01ab2cd3.
  5. Choose the Check owner, the person who follows it up.
  6. Leave Run this check ticked to start daily reads.
  7. Give a Reason for change and press Add check.

Read the result

Open a check. Its result is one of:

  • Passed
  • Needs attention
  • Needs evidence
  • Needs a fresh read
  • Not applicable, while an exception applies
  • Unavailable

Under Read schedule, you see the Last completed read and when the Next daily attempt due is. Open What this checks for its exact scope, and Recorded history for every past result and settings change.

Fix what it found

  1. Make the change in the system itself.
  2. Press Record correction, describe What changed?, give a Reason for change and press Save correction.
  3. Press Recheck now, give a reason and press Queue recheck.

Recording a correction does not change the result. The check passes only when a fresh read from the provider confirms it. Until then, the current result stays.

Exceptions

If a check should not apply for a while, press Propose an exception. Give an Expiry date and a Reason for change, then press Request review. An independent person must review it. They open the check, press Review exception, choose Accept exception or Return for changes under Review decision, and press Save review. An exception stops applying when it expires.

Change the settings

Press Check settings to rename the check, change its system, customer ID or owner, or pause it by unticking Run this check. Every change needs a reason and is kept in the history.

Download the record

On a check, press Download record to save its full record as a file.

Common questions

"We fixed it, so why does it still say Needs attention?" The result changes only after a fresh read confirms the fix. Press Recheck now.

"Why does it say Choose a current owner?" The check's owner no longer has access. Change the Check owner under Check settings.

Can’t find what you need? Contact us.