Cloud Security Command Center (Cloud SCC)

Cloud SCC is like a dashboard for notifying organizations and security teams about possible threats or vulnerabilities. Cloud SCC is only available when a GCP account is set up as an organization. Individual GCP users do not have access to Cloud SCC. When an anomaly is identified, it creates a report of a particular threat or misconfiguration in GCP’s realm, called a finding. Cloud SCC provides a consolidated view of all the findings and anomalies detected within a cloud service, such as a GCE.

Note that there are two activation levels; by default, organizations, when they sign up, are assigned the Standard service tier, which has limited functionality and includes looking at the general security health of GCEs and their configurations. It also includes features such as error reporting, continuous exports to Pub/Sub, and access to other integration points, including Cloud Data Loss Prevention, Cloud Armor, and so on.

Google also...