G Suite Business Capabilities.

G Suite Business is the premium business version of G Suite. In addition to everything available in G Suite Basic, it includes unlimited storage and Google Vault for everyone in your organisation, plus additional Drive administration, auditing, and reporting features.

Unlimited Storage:

Store as many files in Google Drive as they need, as well as unlimited Gmail messages and Google Photos. Users no longer need to pick and choose only the most valuable content, saving them time and worry. (If you have 4 or fewer users in your organisation, each user gets 1 TB of storage.) If you have more than 4 users, then its unlimited storage for all users.

Google Vault:

Google Vault lets you retain, hold, search, and export your organisation's mail and chat messages. You can also search and export your organisation's files in Google Drive. Vault is entirely web-based, so there's no need to install or maintain any software. Vault is included with G Suite Business.

Vault provides the following e Discovery services:

Email and chat archiving—Set retention rules to control how long email messages and history-on chats are retained before they are removed from user mailboxes and deleted from Google systems. Learn about retention.

Legal holds—Place legal holds on users to preserve all their emails and on-the-record chats indefinitely in order to meet legal or other retention obligations. You can place legal holds on all content in a user's account, or target specific content based on dates and terms.

Drive file search—Search your domain’s Google Drive accounts by user account, organisational unit, date, or keyword. Search results include Google file types as well as non-Google file types such as PDF, DOCS, and JPG.

Email and chat search—Search your domain's email, history-on Hangouts, and on-the-record Google Talk chats by user account, date, or keyword. Vault supports Boolean, Gmail-specific, and wildcard operator searches.

Export—Export specific email, on-the-record chats, and files from Drive to standard formats for additional processing and review.

Audit reports—Use Vault audit reports to learn about actions Vault users have taken during a specified period of time.

Advanced Drive controls:

As of today, all files uploaded to Google Drive will be encrypted, not only from your device to Google and in transit between Google data centres, but also at rest on Google servers. Some of the most common file types stored in Drive are Microsoft Word, Excel and PowerPoint files. Google has now built the power of Quick-office into Docs, Sheets and Slides, so you can open and edit those documents in their native format using Office Compatibility Mode directly on Android and Chrome browser today, and coming soon to iOS. No need to buy additional software or decide how to open your file. Editing Office files is just a click or tap away from Drive on your computer, tablet or phone.

Audit and reporting features:

The Drive audit log provides an easy way to monitor user activity in Drive. Some of the actions logged in the audit reports include content downloads, previews, deletions, views and sharing. The login the Admin console allows you to view details, such as event description, file type, IP address, user, event name and user.

The audit log features a filters section that provides an easy way to display events based on specific criteria. The section gives you an opportunity to create and configure custom alerts.

DLP:

If your are a G Suite (Business)Unlimited customer, Data Loss Prevention (DLP) for Gmail will add another layer of protection to prevent sensitive information from being revealed to those who shouldn’t have it.G Suite already helps administrators to manage information security such as encryption, sharing controls, mobile device management, and two-factor authentication.

G Suite DLP Works Process:

Domain organisations may have a policy that the particular department should not share customer any secure information such as any credit card externally. To keep this information safe, admins can now easily set up a DLP policy by selecting “Credit Card Numbers” from a library of predefined content detectors. Gmail DLP will automatically check all outgoing emails from the Sales department and take action based on what the admin has specified: either quarantine the email for review, tell users to modify the information, or block the email from being sent and notify the sender.

Emails content for private data, such as credit card details. The tool also looks into objectionable words such as project codes. It's capable of scanning not only text in emails, but also attachments such as documents, presentations and spreadsheets.Admins can also create custom rules with keywords and regular expressions. Also Admin can enable Optical character recognition (OCR) for his domain.

Mobile Device Management & Auditing in G Suite Business:

This feature allows administrators to view all user events on iOS and Android devices. The auditing process is only applicable to users with a G Suite Business license for the device. The audit logs require you to set up mobile device management. Some of the events that can be viewed in the logs include device compromise, suspicious activity, changes to account registration, failed login attempts and more.