Compliance in the cloud
In this section, we will cover two topics: how you can access the compliance reports that are made available by Google Cloud, and some of the tools and capabilities that are available to achieve continuous compliance in the cloud.
Google products undergo compliance reviews by independent third parties, and the relevant compliance reports are made available to customers. There are two sets of compliance reports: one set can be downloaded from the Google Cloud website and is generally available to anyone; the other set can be requested by a Google Technical Account Manager (TAM) if the Google customer has a TAM assigned to their organization. You can find Google Cloud’s compliance reports here: https://packt.link/eaDuj. New Google Cloud products often have a delay of a few months before they are added to the compliance scope. Google has a scheduled review cycle, and new products are added based on that. Each product undergoes SOC 2 and ISO audits first...