Google has rolled out several meaningful security and management improvements to Workspace this week, now available to all business plans.

• Device Bound Session Credentials (DBSC) – enabled by default: Available for all Workspace users on Chrome for Windows, DBSC ties your login session to the specific device you authenticated from. If malware steals a session cookie, it cannot be replayed from another device — significantly reducing the risk of account takeover following a phishing compromise. This is enabled automatically; no configuration is required.
• Data Loss Prevention for Google Calendar: Admins can now apply DLP rules to calendar event titles, descriptions, and locations. Rules can detect sensitive content (such as credit card numbers or personal identification numbers) and warn users, audit the event, or block it from being saved. This is particularly relevant for businesses that may inadvertently include client or financial data in calendar entries.
• New iOS Device Management Settings: Expanded Apple MDM controls are now available in Google Endpoint Management, covering app permissions, data sharing, iCloud backup behaviour, and device features — all managed from the Workspace Admin console without requiring a separate MDM platform.

DBSC requires no action. Admins who want to configure DLP rules for Calendar or review the new iOS MDM settings should visit the Admin Console under Security > Data protection. Contact OzComm if you need help configuring these settings for your organisation.