Security Command Center
1. Security Command Center
Now, let’s learn about the Google Cloud Security Command Center and what it can do to help you discover, mitigate, and prevent attacks on your applications and data. Security Command Center provides a single, centralized dashboard so you can view and monitor an inventory of your cloud assets. Security Command Center gives enterprises consolidated visibility into their Google Cloud assets across their organization. Using Security Command Center, you can quickly see: The number of projects you have, What resources are deployed, Where sensitive data is located, And how firewalls rules are configured. With ongoing discovery scans, enterprises can view asset history to understand exactly what changed in their environment and act on unauthorized modifications. Anomaly detection from Google, which is integrated with Security Command Center, identifies threats like botnets, cryptocurrency mining, anomalous reboots, and suspicious network traffic. When a threat is detected, Event Threat Detection (also integrated with Security Command Center) surfaces that information so you can quickly take corrective action. Security Command Center also integrates with Google Cloud security tools like Web Security Scanner and Cloud Data Loss Prevention (Cloud DLP), and even third-party security solutions like: Chef, Cloudflare, CloudQuest, McAfee, Qualys, Reblaze, Redlock by Palo Alto Networks, StackRox, Tenable.io, and several others. Google Cloud security accepts feeds from these third-party security solutions so you can include them into your existing systems and workflows. To help meet compliance requirements, use the Cloud Data Loss Prevention API, integrated with Security Command Center. It scans and reports on which storage buckets contain vulnerable data, such as personally identifiable information (PII). Whenever threats are found, you can get real time alerts triggered by Pub/Sub, which sends pertinent information to Gmail or SMS so quick action can be taken to protect your information. Assets are resources like organization, projects, instances, data, services, and applications. Security Command Center discovers your assets across your organization so you can view them in one place. You can even review historical discovery scans to identify new, modified, or deleted assets. Findings can be viewed by type, by resource, or by findings changed - that is, findings whose status or properties have changed during the selected time period. Finding “freshness” in the Security Command Center dashboard is usually less than one minute after ingestion from the finding source. Assets that haven't been discovered and indexed in an automatic or manual scan will usually appear in the findings inventory within 1 minute after discovery. Security Command Center can display findings from third-party security sources that have registered as a Google Cloud Marketplace partner. If your third-party security source isn’t on the partner list, you can request that they complete onboarding as a Security Command Center partner. To add a new third-party security source to Security Command Center, you will first need to set up the security source, and then enable it in the Security Command Center dashboard. You will also need to enable the Security Command Center dashboard, asset discovery, and the security scanners you're using as security sources.2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.