Control: GCP > CIS v5.0 > 1 - Identity and Access Management > 1.01 - Organization Resource > 1.01.04 - Ensure Organization Policies Are Configured For Centralized Constraints

Configures auditing against a CIS Benchmark item.

Level: 2

Ensure that one or more baseline Organization Policies are configured at the organization or folder level in accordance with enterprise security requirements. Organization Policies act as preventive guardrails that set centralized constraints on how resources can be configured across all projects within the organization hierarchy. These policies can enforce security invariants such as preventing public IP addresses on compute instances, requiring OS Login for SSH access, restricting resource locations to approved regions, enforcing uniform bucket-level access on Cloud Storage, or limiting IAM policy member domains to prevent external sharing.