Vanguard Magazine

commercial cloud with our Guardrails, Landing Zones, and Assured Workloads solutions: • Guardrails — The Government of Canada has set guardrails for govern- ment organizations utilizing cloud services for their workloads. They are considered an essential part of data se- curity for organizations looking to host infrastructure-as-a-service (IaaS), soft- ware-as-a-service (SaaS), or platform-as- a-service (PaaS) workloads in the cloud. Google Cloud's GC Cloud guardrails solution allows government depart- ments to move to the cloud, ensuring security measures are in place before on- boarding begins, including implement- ing a preliminary baseline set of controls within cloud-based environments and providing data validation tools. • Landing Zones — Landing Zones en- tail a broader set of ITSG-33 controls than guardrails. They allow for proj- ects based on data with a Protected-B classification to move from ideation to production. Again, Google Cloud has built out an automated deployment and verification process that will shorten the time to get from start to Security As- sessment and Authorization (SA&A) approved deployments. 5,6 • Assured Workloads — Assured Work- loads allow you to confidently config- ure storage and access to sensitive data to meet compliance requirements from the Google Cloud Console, essentially an extension of the Landing Zones. It enables agencies to choose security set- tings while we put the cloud controls in place. Assured Workloads can meet stringent compliance standards without compromising on the best parts of the commercial cloud. This includes giving departments full control of where their data is stored and processed and ensur- ing any Google Cloud support person- nel you work with also meet compliance standards. Minimizing Misconfiguration Errors Misconfiguration problems are a common source of security breaches for agencies. To remedy this, we've designed Assured Workloads to simplify the configuration process, allowing for fewer user errors. "It's easy for agencies to feel that if they just use the government cloud configura- tion, they're compliant and secure. This, however, is a dangerous assumption to make," says Johnson. "A lot of work needs to go into securing, making sure the en- vironment is compliant." 7 Assured Work- loads doesn't eliminate the need to do that work. Instead, it simplifies the process into steps, which reduces the risk. This sim- plified experience increases security and decreases the risk of running compliant workloads at scale. Shared Fate, Secure Outcomes At Google, we're moving from shared re- sponsibility to shared fate. We want our customers to understand the risks of mov- ing to the cloud and how we're mitigating them rather than the simple, transactional nature of shared responsibility. Shared fate means investing in our customer's success. Guardrails, Landing Zones, and Assured Workloads are helping us with that invest- ment by reducing both the cost and risk of running compliant workloads in a public cloud environment. www.vanguardcanada.com DECEMBER 2021/JANUARY 2022 25 Sponsored Content References 1. Prieto, D., Manfra, J. (2021, March 30). How Google Cloud can help the Public Sector embrace zero trust, https://cloud.google.com/blog/ topics/public-sector/how-google- cloud-can-help-public-sector-embrace- zero-trust. 2. BeyondCorp Zero Trust Enterprise, https://cloud.google.com/beyondcorp. 3. Prieto, D., Manfra, J. (2021, March 30). How Google Cloud can help the Public Sector embrace zero trust, https://cloud.google.com/blog/ topics/public-sector/how-google- cloud-can-help-public-sector-embrace- zero-trust. 4. Goldstein, J. (2020, July 16). What Are Insider Threats and How Can You Mitigate Them?, What Are Insider Threats and How Can You Mitigate Them? (securityintelligence.com) 5. Vergadia, P., Holmes, W. (2020, September 29). Highway to the landing zone: Google Cloud migration made easy, https://cloud. google.com/blog/topics/developers- practitioners/google-cloud-migration- made-easy. 6. Reed, J. (2021, August 3). Get in Sync: Consistent Kubernetes with new anthos Config Management features, https://cloud.google.com/blog/ products/containers-kubernetes/ anthos-config-management-config- controller-available-on-gke. 7. Prieto, D., Manfra, J. (2021, March 30). How Google Cloud can help the Public Sector embrace zero trust, https://cloud.google.com/blog/ topics/public-sector/how-google- cloud-can-help-public-sector-embrace- zero-trust. Frank Currie heads the Google Cloud Public Sector, Healthcare, and Higher Education Customer Engineering teams in Canada. He works closely with customers around how to help them navigate their path to Cloud Computing. For more information on how Google Cloud can help the Canadian public sector modernize its compliance, visit our Canada Public Sector Solutions page: g.co/cloud/pscanada. "Agencies should be able to interface with the public cloud and have access to all the latest and greatest capabilities — features, security, performance, scale, availability, and support — and not have to give up those compliance capabilities that you're looking for." — Chris Johnson, Global Compliance Product Lead, Google Cloud

• Cover