Your organization uses Google Workspace Enterprise Edition for authentication. You are concerned about employees leaving their laptops unattended for extended periods of time after authenticating…

Creating a policy relies on user compliance and does not provide a technical enforcement mechanism to prevent unauthorized access from unattended laptops.

Reviewing and disabling unnecessary Google Cloud APIs is a general security best practice but does not address the specific risk of an already authenticated, unattended session.

Requiring strong passwords and 2-Step Verification (2SV) protects the initial authentication process but does not prevent access once a session is already established and left unattended.

Setting a shorter session length timeout for Google Cloud services directly mitigates the risk of an unattended, authenticated laptop being used by malicious actors. This ensures that users are re-prompted for authentication after a specified period of inactivity, thereby protecting access to Google Cloud resources even if a device is left unlocked.