In an effort to assuage MSPs' and users' concerns, Google has tightened up some of its security features and practices.

April 9, 2018

2 Min Read
Cloud Security

By Frank J. Ohlhorst

The last thing any MSP wants to hear from a customer is the belief that the cloud is a dangerous place. After all, how can an MSP sell cloud services if the perception is that the cloud has become akin to some sort of digital Wild West, where outlaws roam free and robberies are a daily occurence?

Google is looking to become the new sheriff in town, or at least some type of marshal, where cybercriminals will flee the confines of the Google Cloud in search of easier pickings.

The company recently fired a warning shot into the air with some major security revamps to its cloud products portfolio, including updates to the Google Cloud Platform (GCP), G Suite, Chrome Enterprise and other offerings. At the CEO Security Forum in New York, the company made 20 announcements about security enhancements, aiming to put some security concerns to rest. Some of the most notable enhancements include:

  • VPC Service Controls: Stops identity mismanagement, misconfigured policies and compromised virtual machines by creating a security perimeter around data stored in API-based Google Cloud Platform services, such as Google Cloud Storage and BigQuery.

  • Cloud Armor: A DDoS and application defense service that will protect cloud customers from denial of service attacks and attacks directed at applications.

  • Increased Compliance: The company now claims that its App Engine and Cloud Machine Learning Engine are HIPAA-compliant to the extent of having a HIPAA Business Associate Agreement.

  • Cloud SCC: The Cloud Security Command Center is designed to bring insight to security teams, allowing them to proactively gather data, identify threats and gain visibility into applications, services and other cloud elements.

  • G Suite Enhancements: G Suite now incorporates anti-phishing tools, mobile-device management controls, OAuth activity reporting, improved team drive controls and an improved security dashboard.

  • Access Transparency: Offers audit trails and logs showing everything that happens with data stored by google.

The above enhancements will be welcomed by MSPs looking to further their involvement with services provided by Google Cloud. What’s more, the new security offerings and options bring cloud security into better focus and should help to assuage customers’ security concerns.

While information security and the cloud still have a ways to travel, Google is making steps in the right direction, especially as businesses become more concerned over privacy issues and new requirements such as GDPR. Transparency goes a long way toward reassuring customers that they have control over their data and that the data is fully auditable, which should also fit well into compliance reporting requirements.

Savvy MSPs should be able to spin Google’s new security offerings into enhanced services and reporting capabilities, while also helping to better protect customer clouds.

Read more about:

Agents
Free Newsletters for the Channel
Register for Your Free Newsletter Now

You May Also Like