Notion Configuration Guide
Business ToolsOrganization Security
This checklist is adapted from Auditware's W3OSC standards.
Workspace Settings
Member and Site Management
- People > Review members and guests
- Sites > Review and unpublish any unnecessary pages
Security & Data Settings
- Security & data > [1]
- Disable publishing sites and forms > On
- Disable duplicating pages to other workspaces > On
- Disable export > On
- Allow page access requests from non-members > Off
- Disable members inviting guests to pages > On
- Allow members to request adding guests > Off
- Allow members to request adding other members > Off
- Allow any user to request to be added as a member of the workspace > Off
- Allow page guests to request to be added as members to the workspace > Off
Connections Management
- Connections >
- Restrict members from adding connections > Restricted
- Allow webhooks in automations > Disabled
- Review the connections and disconnection any unnecessary
Notes
[1] Enterprise Features
Some of these settings require an Enterprise workspace plan. These can be omitted, but it is recommended to consider upgrading your plan for the security benefits if the size and/or risk tolerance of your organization warrants the extra protections.