Download risk reports

This page describes how to download risk reports (Preview) that are generated for your Security Command Center organization.

Risk reports provide insights into potential attack paths and exposures within your Google Cloud environment. You can download reports to review findings and share information with security management and analysts.

Required roles

Before you download a risk report, verify that you meet the following requirements:

To get the permissions that you need to download a risk report, ask your administrator to grant you the following IAM roles on Security Command Center organization:

All: Risk report viewer role (securitycenter.riskReportsViewer)

For more information about granting roles, see Manage access to projects, folders, and organizations.

You might also be able to get the required permissions through custom roles or other predefined roles.

Download a risk report

Download a risk report as a PDF from the Google Cloud console.

In the Google Cloud console, go to the Risk overview page of Security Command Center.

Go to Risk overview
Click Download Risk Report.
Note:
- If you don't have the required role to download a report, the Google Cloud console displays a message indicating the necessary permissions.
- If you have the required role but a risk report is not available, the system scan is still running. The report becomes available after the scan completes.
From the Download Risk Report window, select the report that you want to download. You can select the latest report or a report from a specific date within the last 30 days.

The Google Cloud console provides quick links to download the Most recent report, the report from 1 week ago, and the report from 30 days ago. The quick links include the timestamp or date of the report. The first page of the downloaded report includes a timestamp that indicates when data for the report was collected.
Optional. If you want to choose a report that the quick links didn't locate, choose an option in Select a report date.
Choose your encryption option: Add password encryption (the default option) or Do not password encrypt.

If you want to encrypt the PDF file, you must provide a password between 12-16 characters, using any combination of ASCII letters, numbers, and symbols. Google Cloud does not store or provide password recovery if you lose the password.
Click Download.

The report is downloaded as a PDF file to the system that you're using. Typically, the file is available in the browser downloads folder by default.

What's next

To learn more, see Risk reports overview.