Shared fate
At Google Cloud, we are active partners committed to helping you achieve your desired risk and security outcomes. We are not delineators of where our responsibility ends and where yours begins.
Instead, we stand with you from day one, helping you implement best practices for safely migrating to and operating in our Trusted Cloud.
We call this operating model shared fate.
We're there with you, every step of the way, on your cloud transformation journey
Shared fate means a closer interaction with you as you secure your resources on Google Cloud. This includes providing you with:
- A strong trusted foundation with built-in, always-on, immutable controls aligned to Google’s opinionated best-practices guidance
- Actionable posture and risk intelligence powered by Google’s ML/AI and continuous threat protection powered by Mandiant’s threat intelligence
- Going beyond risk assessment and monitoring to risk protection with industry-first, bespoke cyber insurance coverage and cryptomining protection
Under the shared fate model, we play a significantly more active role in your security. With shared fate, you can:
- Work together with us as a team toward a common security and risk management goal, and share a fate greater than the terms of a transactional relationship
- Rely on close communication and reduce the possibility of erroneous security presumptions that can increase your risk level
- Use our expertise, resources, and knowledge to help make security improvements and reduce your security risk
Get to the security and risk outcomes you want
Getting security right in the cloud can be challenging, and an expert partner committed to your success can make all the difference.
With shared fate, we help you operationalize a best-practices approach for securing your cloud footprint.
Shared responsibility vs. shared fate
A shared responsibility model, promoted and used by legacy cloud providers to guide security and risk discussions, draws a line in the sand. Everything on one side of the line is the cloud provider’s responsibility and everything on the other side—the configuration, the applications, the data—that’s your responsibility.
This can create an unhealthy dynamic that can lead to finger-pointing, blame, and abdication of responsibilities. It often feels adversarial.
At Google Cloud, we aim to erase that line with shared fate. We will not be the delineators of where our responsibility ends and where yours begins. Instead, we share in the outcome of your security transformation. Google Cloud is the new way to cloud, and shared fate is the new way to operate, manage risk, and succeed.
Get the help you need
- A secure-by-design, secure-by-default infrastructure foundation augmented by layers of security controls that you can configure according to your risk profile
- Security foundations that address top security concerns and provide our top recommendations
- Secure blueprints that let you deploy and maintain secure solutions using infrastructure as code (IaC)
- Architecture Framework best practices that address the top recommendations for building security into your cloud infrastructure patterns
- Landing zone navigation guides to help you build a secure foundation for your workloads, including resource hierarchy, identity onboarding, security and key management, and network structure
Manage deployment and governance
Shared fate also helps with your continued governance of your environment.
- Assured Workloads, which helps you meet your compliance obligations
- Security Command Center Premium, which uses threat intelligence, threat detection, web scanning, and other advanced methods to monitor and detect threats; it also provides a way to resolve many of these threats quickly and automatically
- Organization policies and resource settings that let you configure policies throughout your hierarchy of folders and projects
- Policy Intelligence tools that provide you with insights on access to accounts and resources
- Confidential Computing, which allows you to encrypt data in use
- Sovereign Controls provided by partners to help meet your digital sovereignty needs
Get peace of mind with financial protection and risk transfer
Shared fate puts our skin in the game when it comes to delivering security outcomes on our platform.
- Risk Protection Program helps you use the power of Google Cloud as a platform to manage risk by sharing your security posture data with cyber insurers to obtain a cyber insurance policy designed exclusively for you at reduced costs
- Cryptomining Protection Program offers financial protection of up to $1 million to cover unauthorized Google Cloud compute expenses associated with undetected cryptomining attacks for Security Command Center Premium customers
"Shared fate drives a flywheel of cloud adoption. Visibility into the presence of strong default controls and transparency into their operation increases customer confidence, which in turn drives more workloads coming onto cloud."
Phil Venables, Chief Information Security Officer, Google Cloud
Read the blogTransform your security program
You need resources and expertise to modernize security as part of your digital transformation.