Policy: GCP > CIS v2.0 > 1 - Identity and Access Management > 1.16 - Ensure Essential Contacts is Configured for Organization > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

Follow the documentation and setup corporate login accounts.

From Google Cloud Console

1. Go to Essential Contacts by visiting https://console.cloud.google.com/iam-admin/essential-contacts

2. Make sure the organization appears in the resource selector at the top of the page. The resource selector tells you what project, folder, or organization you are currently managing contacts for. 3. Click +Add contact 4. In the Email and Confirm Email fields, enter the email address of the contact. 5. From the Notification categories drop-down menu, select the notification categories that you want the contact to receive communications for. 6. Click Save

From Google Cloud CLI

1. To add an organization Essential Contacts run a command:

gcloud essential-contacts create --email="<EMAIL>" \\ --notification-categories="<NOTIFICATION_CATEGORIES>" \\ --organization=<ORGANIZATION_ID>

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in GCP > CIS v2.0 > Maximum Attestation Duration. Set to a blank value to clear the attestation.