This document describes how to manage reports using Cyber Insurance Hub on Google Cloud.
Before you begin
- Complete the onboarding steps for your organization.
- Configure Cyber Insurance Hub.
Create a report
A report is an organization-level object that aggregates information from Cloud Asset Inventory and Security Command Center to build an aggregate view of risk across your organization. These reports are aligned to the CIS Google Cloud Platform Foundation Benchmark v1.2.0. For more information on this framework, see Vulnerabilties findings.
You can enable automatic report generation.
Alternatively, to create a manual report, follow these steps:
-
In the Google Cloud console, go to the Cyber Insurance Hub page.
-
On the Cyber Insurance Hub page, click Create manual report.
When the report has finished, you see a green circle with a check mark. Click the date in the Created on column to view the report.
Download a report
After you create a report, you can download it.
To download a report, follow these steps:
-
In the Google Cloud console, go to the Cyber Insurance Hub page.
- Click the date of the report that you want to download.
- On the report view page, click Download.
Approve a report
To approve a Cyber Insurance Hub report, you must have one of the following IAM roles:
- Risk Manager Admin (
roles/riskmanager.admin
) - Risk Manager Report Reviewer (
roles/riskmanager.reviewer
)
For more information about roles in Cyber Insurance Hub, see Cyber Insurance Hub roles.
This responsibility often lies with the treasury team in larger organizations.
To approve a report, follow these steps:
-
In the Google Cloud console, go to the Cyber Insurance Hub page.
- On the Cyber Insurance Hub page, view an individual report by clicking the date in its Created on column.
- In the page that opens, in the Status field, select whether the report is approved for sharing.
To send the report to insurers, select Approved to share.
If the report is Unreviewed, then the system generates a warning when a user attempts to send that report to insurers.
If you select Do not share, then you can't send the report to insurers.
Send a report to insurance carriers
Cyber Insurance Hub lets you send reports to our insurance partners: Beazley, Chubb, and Munich Re. Our partners can use Cyber Insurance Hub reports to potentially reduce the cost of cyber insurance and provide broad coverage designed exclusively for Google Cloud customers. Learn more about the Risk Protection Program.
Once you create a report, and the report has been approved, you can send it to our insurance carrier partners.
Reach out to your broker
You can use any broker to access the Risk Protection Program. If you don't have a broker, you can use one of the following insurance brokers who can advise you on the cyber insurance policies our partners provide. To learn more, reach out to your broker or to any of the following brokers:
Broker | Contact | Email template |
---|---|---|
Aon | GCRiskManager@aon.com |
Contact Aon |
Alliant | AlliantCyber@Alliant.com |
Contact Alliant |
Epic | cyberinsure@epicbrokers.com |
Contact Epic |
Lockton | GoogleRPP@lockton.com |
Contact Lockton |
Marsh | CyberRPP@marsh.com |
Contact Marsh |
McGill and Partners | cyber.it@mcgillpartners.com |
Contact McGill and Partners |
NFP | nfpcyberpanel@nfp.com |
Contact NFP |
Willis Towers Watson | CPP@wtwco.com |
Contact Willis Towers Watson |
Send the report
To send a Cyber Insurance Hub report, you must have the following IAM role:
- Risk Manager Admin (
roles/riskmanager.admin
)
Once you have an approved report and you've contacted your broker, you can send that report using Cyber Insurance Hub. After the report is sent, your broker will coordinate next steps with you and the insurance carriers. Your broker is responsible for leading you through the rest of the insurance process.
To send a report to our insurance carrier partners, follow these steps:
-
In the Google Cloud console, go to the Cyber Insurance Hub page.
- On the Cyber Insurance Hub page, view an individual report by clicking the date in its Created on column.
- On the report view page, make sure the report has a status of Approved to share in the top left corner. Then, click Send report to insurance partners.
-
On the Send page, do the following steps:
- Enter your email address. You receive a confirmation email once the report is sent.
- Enter the requested details about your organization so that our partners can correctly route your application.
- Select or enter your organization's insurance broker, if known.
- Select the insurance partners that you want to share your report with.
- Acknowledge that you have authority to send the report and agree to the consent and disclosure language.
- Click Agree.
-
In the Confirmation dialog, enter the name of your Google Cloud organization to confirm that you want to send the report to the selected insurance carrier partners.
After you send the report, the selected partners will have access to the report, your Organization ID, and the information you have provided.
- Click Send to send the report to the selected insurance carrier partners.
What's next
- Learn how to remediate findings.
- Learn about automatic report generation.
- Learn about audit logging.