Context-Aware Access using Cloud Identity

As Google was growing globally, there was a need to redesign the security models and access policies that would allow employees from various geographies and devices to access their data securely. The intent was to implement a zero-trust security process, enabling users to work from anywhere without the need for a traditional VPN.

This model is called BeyondCorp.

With the design of such secure system, security and pragmatism should go together; otherwise, security could deter users from using the product. Employees are your assets, and these security options should allow employees to work from anywhere; they should not be a hindrance. The solution should provide excellent auditability and traceability when things go wrong. With a diverse workforce including field workers, parents, part-time workers, and traveling executives, the BeyondCorp model needed to be flexible and cater to different user needs. Google opened up this BeyondCorp...