Whether they were ready for it or not, the COVID-19 pandemic transformed many retailers into digital businesses. Retailers made huge investments into commerce technologies, customer experience tools, sales and fulfillment technology, and improving digital experiences to continue providing their goods and services to their customers. Now, more than a year into the COVID-19 pandemic, digital retail is the new normal. In fact, many retailers are planning on expanding their digital investments. However, as their digital footprint expands, so do their threats and security concerns. 

As a digital-focused retailer, your website is the most visible part of your attack surface. Your website is where your customers search for goods or services, make payments, or learn more about your brand. However, your website does not operate in isolation. There is an underlying infrastructure as well as the services that run on top of it that need protection from a wide array of attacks that may seek to compromise your data, internal employees, business, and customers. During this week’s Google Cloud Retail Summit, we’ve shared why Google Cloud is built to be the most trusted cloud for retailers. From providing you with control over your data as you move from your own data centers to the public cloud to giving you built-in technology to protect your applications all the way to your end users, Google Cloud helps you safely migrate to and operate in our Trusted Cloud.

Trusted Cloud Gives You Control, Transparency, and Sovereignty

• Access Transparency: We offer the ability to monitor and approve access to your data or configurations by Google Cloud support and engineering based on specific justifications and context, so you have visibility and control over insider access. 
• Certificate Authority Service (CAS): CAS is a highly scalable and available service that simplifies and automates the management and deployment of private CAs while meeting the needs of modern developers and applications. With CAS, you can offload to the cloud time-consuming tasks associated with operating a private CA, like hardware provisioning, infrastructure security, software deployment, high-availability configuration, disaster recovery, backups, and more, allowing you to stand up a private CA in minutes, rather than the months it might normally take to deploy.

• Confidential Computing: We already encrypt data at-rest and in-transit, but customer data needs to be decrypted for processing. Confidential Computing is a breakthrough technology which encrypts data in-use—while it’s being processed. Confidential VMs take this technology to the next level by offering memory encryption so that you can further isolate your workloads in the cloud. With the beta launch of Confidential VMs, we’re the first major cloud provider to offer this level of security and isolation while giving you a simple, easy-to-use option for your newly built and “lift and shift” applications.

• Cloud Key Management: We allow you to configure the locations where your data is stored, where your encryption keys are stored, and where your data can be accessed from. We give you the ability to manage your own encryption keys, even storing them outside Google’s infrastructure. Using our External Key Management service, you have the ability to deny any request by Google to access encryption keys necessary to decrypt customer data at rest for any reason.

Trusted cloud Helps You Prevent, Detect, and Respond to Threats

• BeyondCorp Enterprise is Google’s comprehensive zero trust product offering. Google has over a decade of experience managing and securing cloud applications at a global scale, and this offering was developed based on learnings from our experience managing our own enterprise, feedback from customers and partners, as well as informed by leading engineering and security research. We understand that most customers host resources across different cloud providers. With this in mind, BeyondCorp Enterprise was purpose-built as a multicloud solution, enabling customers to securely access resources hosted not only on Google Cloud or on-premises, but also across other clouds such as Azure and Amazon Web Services (AWS).

• Cloud Armor: We’re simplifying how you can use Cloud Armor to help protect your websites and applications from exploit attempts, as well as Distributed Denial of Service (DDoS) attacks. With Cloud Armor Managed Protection Plus, you will get access to DDoS and WAF services, curated rule sets, and other services for a predictable monthly price.

• Chronicle: Chronicle is a threat detection solution that identifies threats, including ransomware, at unparalleled speed and scale. Google Cloud Threat Intelligence for Chronicle surfaces highly actionable threats based on Google’s collective insight and research into Internet-based threats. Threat Intel for Chronicle allows you to focus on real threats in the environment and accelerate your response time.
• Google Workspace Security: Used by more than five million organizations worldwide, from large banks and retailers with hundreds of thousands of people to fast-growing startups, Google Workspace and Google Workspace for Education include the collaboration and productivity tools found here. Google Workspace and Google Workspace for Education are designed to help teams work together securely in new, more efficient ways, no matter where members are located or what device they use. For instance, Gmail scans over 300 billion attachments for malware every week and prevents more than 99.9% of spam, phishing, and malware from reaching users. We’re committed to protecting against security 1 threats of all kinds, innovating new security tools for users and admins, and providing our customers with a secure cloud service.
• Identity & Access Management IAM: Identity and Access Management (IAM) lets administrators authorize who can take action on specific resources, giving you full control and visibility to manage Google Cloud resources centrally. For enterprises with complex organizational structures, hundreds of workgroups, and many projects, IAM provides a unified view into security policy across your entire organization, with built-in auditing to ease compliance processes.
• reCAPTCHA Enterprise: reCAPTCHA has over a decade of experience defending the internet and data for its network of more than 5 million sites. reCAPTCHA Enterprise builds on this technology with capabilities, such as two-factor authentication and mobile application support, designed specifically for enterprise security concerns. With reCAPTCHA Enterprise, you can defend your website against common web-based attacks like credential stuffing, account takeovers, and scraping and help prevent costly exploits from malicious human and automated actors. And, just like reCAPTCHA v3, reCAPTCHA Enterprise will never interrupt your users with a challenge, so you can run it on all webpages where your customers interact with your services.

• Security Command Center: With Security Command Center (SCC), our native posture management platform, you can prevent and detect abuse of your cloud resources, centralize security findings from Google Cloud services and partner products, and detect common misconfigurations, all in one easy-to-use platform. We have Premium tier for Security Command Center to provide even more tools to protect your cloud resources. It adds new capabilities that let you spot threats using Google intelligence for events in Google Cloud Platform (GCP) logs and containers, surface large sets of misconfigurations, perform automated compliance scanning and reporting. These features help you understand your risks on Google Cloud, verify that you’ve configured your resources properly and safely, and document it for anyone who asks.

• VirusTotal: VirusTotal inspects items with over 70 antivirus scanners and URL/domain blocklisting services, in addition to a myriad of tools to extract signals from the studied content. Any user can select a file from their computer using their browser and send it to VirusTotal.
• Web Risk API: With Web Risk, you can quickly identify known bad sites, warn users before they click infected links, and prevent users from posting links to known infected pages from your site. Web Risk includes data on more than a million unsafe URLs and stays up to date by examining billions of URLs each day.

Trusted cloud Plays an Active Role in Our Shared Fate 

Our trusted cloud provides a shared-fate model for risk management. We stand with retailers from day one, helping them implement best practices for safely migrating to and operating in our trusted cloud.

We hope you enjoy the sessions we’ve created for you with Google Cloud Retail Summit and that they help you understand the ways our trusted cloud can help secure retailers all over the world.

We’re excited to announce that Google Cloud Next returns on October 11–13, 2022. 

Join us for keynotes from industry luminaries and engage live with Google developers. Explore dynamic content across various learning levels, and dive deep into technologies and solutions spanning the Google Cloud and Google Workspace portfolios. Participate in breakout sessions, demos, and hands-on training. Hear from the world’s leading companies about their digital transformation journeys. You’ll have opportunities to connect with experts, get inspired, and boost your skills. We can’t wait to see you at Next ’22!

It’s too early to determine how the event experience will span the digital and physical worlds, so please stay tuned for updates as we plan with the health and safety of the attendees in mind. In the meantime, mark October 11–13 in your calendar, and visit our event site for updates. For more inspiration, rediscover Next ’21, now available on demand.

Digital tools such as cloud computing are fueling economic transformation across the US, including Ohio. Google continues to invest across cities and communities in Ohio, bringing over 200 jobs to the state, and helping provide $12.85 billion of economic activity for tens of thousands of Ohio businesses, nonprofits, publishers, creators and developers. To further accelerate the transformation of all Ohioan businesses and technologists, we’re thrilled to announce our newest Google Cloud region in Columbus, Ohio is open. The Columbus cloud region brings a second region to the Midwest, the 10th region to North America, and grows our global cloud region count to 33.

A region for the Buckeye State

Now open to Google Cloud customers, the Columbus region (us-east5) provides you with the speed and availability you need to innovate faster, build high-performing applications, and serve local customers — all on the cleanest cloud in the industry. Additionally, the region gives you added flexibility to distribute your workloads across the central, midwest, and eastern US.

The Columbus region offers immediate access to three zones, for high availability workloads, and our standard set of products, including Compute Engine, Google Kubernetes Engine, Cloud Storage, Persistent Disk, CloudSQL, and Cloud Identity. Our private backbone connects Columbus to our global network more quickly and securely. In addition, you can integrate your on-premises workloads with our new region using Cloud Interconnect. This means that Columbus-based customers can expand globally from their front door, and those based outside the region can more easily reach their users in the Midwest.

What customers are saying

Industries including retail, financial services, and IT are investing in Columbus. Organizations across these verticals have turned to the Google Cloud to innovate faster and help solve their most complex challenges

“As Wendy’s continues to innovate in new ways to create fast, frictionless, and fun interactions that redefine the way customers visit and enjoy our restaurants, our partnership with Google Cloud is a key enabler to delivering on our AI/ML and data analytics strategies. The proximity of the new Google Cloud region to Wendy’s headquarters provides the ability for us to move and scale quickly as business needs evolve. Additionally, Google Cloud’s investment in Columbus positions central Ohio as a true technology hub, which further boosts Wendy’s and other regional employers’ ability to recruit innovative talent,” said Kevin Vasconi, Chief Information Officer, Wendy’s.

“Huntington National Bank’s API Architecture is a central component to our growth and technology strategy. As our business segments grow from an offering and geographic perspective, we must evolve our technology to provide the optimal experience for our customers and our partners. Collaborating directly with Google Cloud on the build out of their cloud region in Central Ohio, provides the access our technology teams need to innovatively scale our infrastructure to meet the demands of our business with increased availability, lower latency, and greater resiliency,” said Geoff Preston, Chief Architect, Huntington National Bank.

“Google Cloud has been instrumental in our ability to scale and optimize data management and compute resources. We prioritize scale, elasticity and resilience in cloud services and Google Cloud delivers all three globally and locally. With Google Cloud security, we can efficiently process the quantities of application data required to accelerate alert detection and reduce response times for the critical infrastructure our customers depend on to enable the continuity of their vital applications.” said Sheryl Haislet, Chief Information Officer at Vertiv, a global provider of critical digital infrastructure and continuity systems headquartered in Columbus, Ohio, that leverages Google Cloud solutions to provide resilience for its operations and to better support customers.

“The addition of the new cloud region in Ohio continues to demonstrate Google Cloud’s commitment to the enterprise space and their presence in the region,” said Chris Delong, Chief Technology Officer, Designer Brands Inc. / DSW

What’s next

We are thrilled to welcome you to our new cloud region in Columbus, and eagerly await to see what you build with our platform. Register here for our Cloud Study Jam in June – an event for local developers to get hands-on training with Google Cloud. Stay tuned for more region announcements and launches this year, including our next U.S. region in Dallas, TX. And for more information, contact sales to get started with Google Cloud today.

We’ve been saying it for years, the benefits and potential of the cloud abound. 

And yet, more than 80% of respondents in a survey of 753 business leaders point to managing cloud spend as their top organizational challenge, and these same respondents estimate that nearly 1/3 of their cloud spend is inefficient or wasted (Flexera, 2023). Many organizations are new to optimizing cloud costs and ensuring resources are used efficiently.

As your organization digitally transforms you may be realizing what other organizations are realizing too: When it comes to business value, simply migrating to the cloud isn’t enough. Achieving the full benefits of cloud requires fundamental changes to both mindset and behaviors around existing financial-management practices. It requires changing the way your disparate teams work together. 

Enter the Cloud FinOps Building Blocks

Cloud FinOps is a framework, discipline, and cultural shift combining people, processes, and technology to drive financial awareness and accountability. FinOps practices align engineering, finance, technology and business leaders and teams under a primary objective: to maximize business value from the cloud. With Cloud FinOps practices, every business stakeholder is charged not only to take responsibility for their spending and costs, but also to optimize them. These practices enable businesses to manage consumption and make sound, data-informed cloud-spend decisions. Cloud FinOps is comprised of five building blocks:

1. Accountability and enablement
   Establishing governance and policies to manage cloud spend and realize business value.
2. Measurement and realization
   Driving financial accountability and value realization with a defined set of KPIs and success metrics.
3. Cost optimization
   Providing financial visibility and recommendations of IT resource usage to optimize cloud spend.
4. Planning and forecasting
   Modernizing budgeting, forecasting, and chargeback methods to allow for iterative, innovative and cost effective development practices.
5. Tools and accelerators
   Deploying and integrating a set of cloud cost tooling to effectively manage and track cloud spend. Learn more here. 

For a general overview of the Cloud FinOps framework and more on the five building blocks, check out these resources:

• Video | What is FinOps and 3 reasons why you should care about it.
  This 5-minute video provides an overview of FinOps, the 5 building blocks, and how they can benefit your organization. 
• Podcast | FinOps with Joe Daly
  In this podcast, Joe Daly of the FinOps Foundation shares about the key principles of FinOps, which he refers to as financial DevOps. Daly discusses how this framework is helping companies make better and more efficient financial decisions while taking advantage of the cloud.
• Blog | Decoding Cloud FinOps to accelerate digital transformation
  This blogpost discusses the critical role of FinOps in a successful digital transformation. It outlines key metrics to help measure and track business value and to increase visibility into the effects of digital transformation on top-line revenue. 
• Article | Cloud FinOps: The secret to unlocking the economic potential of public cloud
  This Forbes article profiles OpenX, the first major advertising exchange platform to migrate entirely to the cloud. It details the 5 key pillars of the Cloud FinOps framework, which OpenX leveraged in their digital transformation strategy. In just 9 months, they reduced their per-unit costs by more than 60%.  

Importantly, Cloud FinOps isn’t about saving money; it’s about making money. It’s about promoting a cost-conscious culture, financial accountability, and business agility in the cloud. Whatever stage of the cloud journey you’re at, cloud FinOps practices will help you get the most value out of Google Cloud. This framework can help to remove blockers, implement the building blocks, and empower your teams to make better business decisions. 

The Cloud FinOps Journey 

Implementing Cloud FinOps is neither a destination nor a box your organization will check then archive. Rather, Cloud FinOps is an ongoing journey and discipline. It’s inherently iterative. As such, growth and maturity across processes, capabilities, and domains requires action, repetition, and continuous learning. 

Across the five FinOps building blocks, we’ve identified 50 subprocesses to best understand organizations’ FinOps proficiency, capabilities, practice domains, and blind spots. We scale them from 1 to 5 and categorize them in one of three phases of maturity: Crawl, Walk, or Run. Organizations in the Crawl phase tend to focus on technical problem solving and cloud-cost visibility. Organizations in the Walk phase emphasize strategic improvements such as employing cost visibility dashboards to realize better business value. And organizations in the Run phase are focused primarily on transformational change and strategic innovation, factoring cost considerations into both processes and cloud architecture. 

Through this “crawl, walk, run” maturity model, we can evaluate proficiency, establish a benchmark, and recommend a targeted action plan for FinOps adoption. And whatever your level of maturity, your organization can take quick scalable action not only to foster improvement but also to evaluate outcomes and gain insights. 

The key here is that regardless of your organization’s Cloud FinOps maturity level, you can take small steps now toward continuous improvement. Here are some common focus areas and several more resources organized by maturity level that you can access.

Crawl phase 

Improve cloud-cost visibility. 

• Whitepaper | Drive Cloud FinOps at scale with Google Cloud Tagging
  Tags and labels can be useful and flexible tools to help your organization segment cloud spend and allocate costs. This whitepaper introduces Google Cloud Tags and best practices for implementing them. It differentiates tags, which offer reliable reporting and governance features, from labels, which can be prone to problems, including poor coverage and a lack of integrity in data labeling. 
• Whitepaper | Unlocking the value of Cloud FinOps with a new operating model
  This white paper unpacks the details of the FinOps operating model, including roles, organizational alignment, and driving culture change. It details how to establish strong financial governance and a cost-conscious culture. 
• Whitepaper | Cloud FinOps: Shared services cost allocation
  In this whitepaper, you’ll explore the elements of cost allocation as well as the complexities and challenges associated with shared-services cost allocation. While some of these concepts and models are interchangeable between legacy and cloud environments, this whitepaper focuses primarily on cloud computing and associated services.

Walk phase

Improve business-value realization. 

• Blog | 5 key metrics to measure Cloud FinOps impact in your organization in 2022 and beyond
  To drive business growth and topline revenue, business leaders must be able to connect cloud investments to business outcomes. As such, traditional IT metrics and KPIs must continue to evolve. In this blogpost, we’ll explore five key business-value metrics aligned to the five Cloud FinOps building blocks. 
• Whitepaper | Maximize business value with Cloud FinOps
  The cloud introduces new complexity and challenges to traditional IT financial management. As such, it requires strategic financial governance, processes, and partnership across the organization. This whitepaper explains how Cloud FinOps helps enterprises that have invested in cloud to drive financial accountability and accelerate business value.

Run phase 

Improve strategic cloud innovation. 

• Whitepaper | Unit costing: The next frontier in cloud
  In this whitepaper, you’ll explore the nature of and need for cloud unit costing, the standard by which FinOps practitioners obtain full business context for their cloud costs. It features examples from cloud-first organizations that have pioneered FinOps practices. Additionally, it examines several cloud forecasting and budgeting methods, ranging from least to most rigorous. 
• Blog | You get what you pay for: Principles for designing a chargeback process
  Chargeback, a crucial Cloud FinOps capability, is the process of mapping cloud consumption to internal users within an organization. It provides transparency, facilitates accountability,  enables recovery of cloud costs, and fosters a culture of fiscal responsibility. This blogpost will walk you through some best practices in designing an effective chargeback process in Google Cloud. 

Success with Cloud FinOps

As global markets continue to face challenges, there’s never been a better time to increase the return on your cloud investments. Adopting and implementing FinOps practices will help. For some real-world examples of how organizations across a range of FinOps maturity levels have collectively saved millions of dollars on their overall cloud spend, check out these customers’ stories. 

• Video | Next 2022: Top 10 ways to lower your costs on Google Cloud with General Mills
  In this video, which highlights ten leading cloud cost optimization practices, hear how General Mills, which is on pace to increase their cloud footprint by 60%, has approached the discipline of cost savings and accelerated their adoption of Cloud FinOps to drive waste out of their cloud usage. 
• Video | How Nuro optimized their costs on Google Cloud
  In this video, you’ll get an overview of the Google Cloud FinOps framework, a deep dive on cost-optimization best practices, and hear about how startup Nuro AI has adopted their own cost-savings discipline and Cloud FinOps practice. 
• Video | How OpenX reduce per unit costs by 60%
  In this video, you’ll learn how to establish a cost center of excellence within your cloud practice, explore several cost-optimization recommendations, and hear from OpenX about how they reduced their costs on Google Cloud. 
• Case Study | How Sky saved millions with Google Cloud
  In this case study, read how a few years into their cloud adoption journey, media and entertainment company, Sky Group discovered over $1.5 million in savings and optimized costs with BigQuery, Compute Engine, and Cloud Storage. 
• Case Study | Etsy: Doing more with less cost and infrastructure
  In this case study, read how after migrating their data center and ecommerce platform to the cloud, Etsy realized more than 50% savings in compute energy and leveraged committed use discounts (CUDs) to reduce their compute costs by 42%. 

It’s important to remember that FinOps success looks different for different organizations. It’s neither a one-time fix nor a destination reached by way of a single path. But for every organization, success requires small actions, refinement, and continuous improvement. As you leverage Google Cloud FinOps resources and tools, your organization can:

• Drive financial accountability and visibility.
• Optimize cloud usage and cost efficiency.
• Enable cross organizational trust and collaboration.
• Prevent cloud-spend sprawl.
• Break down departmental silos.
• Accelerate innovation. 

Getting started with Cloud FinOps

At Google, we have a team of experts in leading FinOps practices dedicated to helping you create an actionable plan to optimize cloud spend and drive cost efficiency. We’ve created numerous resources to help you get started from any stage in the FinOps journey. 

Whitepaper | Maximize Business Value with Cloud FinOps
This whitepaper outlines steps to help your organization implement FinOps. It details required teams and processes as well as the optimal behaviors, approaches, and outcomes to help maximize your investment on Google Cloud. 

With Google Cloud FinOps, your organization can also accelerate business value in the cloud. To find out more, join us on the Google Cloud Twitter channel twice a month for open Twitter Spaces discussions or reach out to your Google Cloud Sales Representative for a 1:1 discussion.

About DB Corp

DB Corp is India’s largest newspaper publisher delivering 62 editions in four languages and selling about 62 million copies per day. The business also has an extensive online and mobile presence.

Industries: Media & Entertainment

Location: India

Headquartered in Bhopal, India, and listed on the Bombay Stock Exchange, DB Corp is India’s largest newspaper group. DB Corp publishes 62 editions in four languages and sells about 6 million newspaper copies per day. Beyond newspapers, DB Corp operates 29 radio stations, 13 portals and two mobile apps.

Like the media industry in general, DB Corp is having to adapt to readers’ increasing preference for accessing news content online – particularly on mobile devices. However, online advertising is yet to fill the gap left by the leakage of advertising revenues from print. Further disruption occurred when the Indian Government’s implemented a demonetization program in November 2016 that prompted a sharp surge in e-commerce transactions and online banking.

Facing a tsunami of change, DB Corp is developing and executing new strategies to engage consumers and build revenues. These plans include evolving from an IT-supported business to an IT enabled company, and finally to an IT-led business that complements its newspapers with online news and updates throughout the day. DB Corp is building e-commerce properties that leverage its print brands and is moving to increase advertising across its mobile services. Furthermore, the business is looking to capture information about readers and customers to tailor its publications and services more closely to their needs.

Expertise in managing large data volumes behind GCP selection

However, DB Corp’s on-premises infrastructure and traditional applications could not deliver the flexibility and agility needed to support the transition to real-time news delivery. In late 2015, DB Corp started evaluating public and private cloud services, including cloud-based application suites and platform as a service offerings. This process led the business to deploy G-Suite and start working with Google Cloud Platform (GCP). “We selected GCP due to Google’s experience in delivering cloud services, and because nobody else manages data volumes of the magnitude that they do,” says R D Bhatnagar, Chief Technology Officer, DB Corp. “We were also impressed by the fact GCP had a local team with the skills and expertise to educate us about how best to use its products.”

DB Corp is migrating its websites and key applications to GCP. The business is also upgrading its network to remove bandwidth restrictions that could impede the value provided by GCP services. The scale and scope of DB Corp’s G Suite and GCP projects has required the business to engage four partners and access technical expertise and support from Google itself. Technical and business experts from the platform as a service provider are providing monthly updates and training sessions with various groups within the organisation, including user communities and the board of directors.

The Google projects at DB Corp are driving a sharp increase in the speed, agility and performance of the business. “As a senior leader within the organisation, I see the key benefits of GCP and other technologies being lower cost; greater efficiency; and improved business continuity,” says Bhatnagar. “For example, the current data center team can be redeployed to other initiatives as the technical experts at GCP will be undertaking most of the management and maintenance tasks.

DB Corp is already making business and financial performance data available in real time from a single source, enabling business teams to make sound, consistent decisions about digital strategies and other key activities. These teams may also address issues or problems before they compromise the quality of content and services provided to consumers.

Deploying Chrome for Meetings across various offices has enabled teams to communicate and collaborate effectively in real time, breaking down geographic barriers, ensuring each member is on the same page and ensuring the business transformation proceeds smoothly. Sales teams are using Google Forms and Google Sheets to centralize and control tasks such as sales forecasting, reducing the time required to complete reports and updates from up to a week to two hours.

Furthermore, various teams are using calendars to improve organization and productivity. For example, editorial teams are using calendars to track Indian holidays and festivals and deliver relevant content to readers. Reporters are also using Google Cloud Speech API and Google Cloud Translation API services to capture and document interviews and source material for articles at accuracy rates of 95 percent for Hindi alone.