Your organization is on Google Workspace Enterprise and allows for external sharing of Google Drive files to facilitate collaboration with other…

Create an Alert for External Sharing:

Access Google Admin Console: Go to admin.google.com and sign in with your administrator account.

Navigate to Rules: Go to "Security" > "Alert Center" > "Manage Rules".

Create a New Rule: Select "Create Rule" and choose "Drive Audit" as the event source.

Configure Rule Settings: Set the conditions to trigger alerts when files or folders are shared

externally.

Set Notification P

Configure who should receive the alerts and how they should be

notified.

Save the Rule: Save and activate the rule to start receiving alerts on external sharing activities.

Create a Custom Dashboard for External Sharing:

Access Security Investigation Tool: In the Admin console, go to "Security" > "Investigation Tool".

Create a New Investigation: Click "Create" and select "Drive" as the data source.

Set Up Investigation Parameters: Define the parameters to track external sharing activities (e.g., file

shared externally, users involved).

Create Dashboard: Save the investigation as a custom dashboard to continuously monitor external

sharing activities.

Review and Monitor: Regularly review the dashboard and set up automated reports if necessary.

Reference

Google Workspace Admin Help - Create and manage alerts

Google Workspace Admin Help - Use the security investigation tool