Learn how to seamlessly integrate data discovery, classification, precise access controls, and encryption.

Course introduction

Access governance

Automated discovery

Time-bound sharing

Encryption hierarchies

Hardening AI pipelines

gsp2000-secure-bigquery-data-with-fine-grained-access-controls

Secure BigQuery Data with Fine-Grained Access Controls

Course summary

Quiz: Security Best Practices in Google Cloud: Data — Question 1

Quiz: Security Best Practices in Google Cloud: Data — Question 2

Quiz: Security Best Practices in Google Cloud: Data — Question 3

Quiz: Security Best Practices in Google Cloud: Data — Question 4

Securing data

This course equips you to implement a Data Security Posture Management framework by integrating data discovery, classification, access control, and encryption technologies. The curriculum mirrors the 6-Layer AI Stack and Google Cloud Minimum Viable Security Platform mandates to help you secure existing environments.

<h2>Build a Data Security Posture</h2>Data is usually the most valuable thing you store in the cloud, and the most attractive target. This intermediate course shows you how to implement a data security posture management approach on Google Cloud by combining data discovery, classification, access control, and encryption.<br><br><h2>Govern Access and Discover Sensitive Data</h2>You’ll enforce uniform access controls for object storage by moving from legacy access control lists (ACLs) to IAM-only policies and enabling Public Access Prevention. Then you’ll use Sensitive Data Protection to automatically discover and classify sensitive data such as PII at scale. A hands-on lab has you secure BigQuery data with fine-grained access controls.<br><br><h2>Share Safely and Encrypt With Confidence</h2>Next, you’ll set up time-bound data sharing that grants limited access without permanently widening your attack surface. You’ll design encryption hierarchies with Cloud KMS, customer-supplied encryption keys (CSEK), and External Key Manager to meet strict data sovereignty requirements, and learn how to harden AI data pipelines. By the end, you’ll be able to protect sensitive data across its full lifecycle.

Manage Security in Google Cloud

Protect Google Cloud data with IAM-only access, Sensitive Data Protection, time-bound sharing, and Cloud KMS.

Time-bound sharing

Security Best Practices in Google Cloud: Data

Interaktywne ćwiczenie praktyczne