With the novel coronavirus COVID-19 sweeping across continents and fatalities climbing every day, it was only a matter of time before countries closed their borders to contain its spread.

In the wake of this decision, travel and tourism, the linchpins of many economies, were among the worst affected.

According to the United Nations World Tourism Organization (UNWTO), the COVID-19 pandemic caused a 22 percent fall in international tourist arrivals during the first quarter of 2020, and could see an annual decline of between 60 percent and 80 percent when compared with 2019.

The impact on the economy and to livelihoods that are dependent on tourism and hospitality has been significant. Prior to the pandemic, the outlook was quite different. Research by UNWTO in 2018 estimated that India would have 50 million outbound tourists by 2020.

Technology was also set to play a huge part in that growth. A Google Travel study showed that 74 percent of travellers were planning their trips on the Internet, and technologies like AI, IoT and VR were all set to be key trends this year.

Now, as borders slowly reopen and travel restrictions are gradually lifted, technology could once again be the game-changer. Manoj Sharma CTO, Cleartrip.com spoke to YourStory about the industry’s road to recovery and how technology will aid that journey.

Read the Full Story on YourStory

Enterprises want to embrace the pace of innovation and an operational business model of the modern-day cloud, but they don’t want to disrupt their existing IT landscape or upgrade all their legacy applications. This presents a conundrum, as most legacy applications were not designed to run in the cloud, and migrating them can be challenging, risky and cost-prohibitive. 

The complexity, cost and risk of cloud migration often stand in the way of a successful digital transformation. At Google Cloud, we work to meet you where you are and help you craft a migration strategy that lets you run what you want, where you want, how you want. This is why we’re excited to introduce Bare Metal Solution: to jumpstart the migration of applications that have been holding back your cloud adoption. 

Bare Metal Solution consists of all the infrastructure you need to run your specialized workload such as Oracle Database close to Google Cloud. This infrastructure is connected with a dedicated, low-latency and highly resilient interconnect, and connects to all native Google Cloud services. Bare Metal Solution uses OEM hardware that is certified to run multiple enterprise applications, most of which can be migrated to this infrastructure with little or no change, minimizing the risk of migration while simultaneously increasing its velocity.

Bare Metal Solution also comes with automation tools to help you onboard your environment quickly—provisioning your applications, relational databases, configuring popular operating systems and setting up services such as backups and monitoring. The management interface will be familiar to your existing IT teams or systems integrator, allowing you to leverage your investments in existing tools, processes and personnel.

In addition to providing state-of-the-art infrastructure and integrated low-latency access to Google Cloud, Bare Metal Solution also provides the following:

• Completely managed hardware infrastructure: End-to-end infrastructure management such as compute, storage and networking, as well as fully managed and monitored environments such as power, cooling and facilities.
• Google Cloud support and billing: A seamless support experience with support for infrastructure, including defined SLAs for initial response. 24X7 coverage for all Priority 1 and 2 issues. Unified billing across Google Cloud and Bare Metal Solution. 
• Service Level Agreements: Defined enterprise-grade SLA for hardware uptime and interconnect availability.

As an integral part of Google Cloud, Bare Metal Solution lets you off-load provisioning, managing and monitoring of your infrastructure to Google, so you can focus on your own data center modernization. 

The nitty gritty 

Many of the workloads that run on Bare Metal Solution have demanding CPU and I/O requirements. Bare Metal Solution provides a cost-effective and scalable architecture based on state-of-the-art x86 servers and high-performance, resilient storage. The servers are offered in several fixed configurations that support most mainstream enterprise operating systems:

• Dual-socket x86 systems
  • 16 core with 384 GB DRAM
  • 24 core with 768 GB DRAM
  • 56 core with 1536 GB DRAM
• Quad-socket x86 systems
  • 56 core with 1536 GB DRAM 
  • 112 core with 3072 GB DRAM

Bare Metal Solution servers can be used for standalone applications, or configured with application native or database native clustering technologies for high availability. Storage is offered in 1TB volume increments of either hybrid or all-flash disk. For applications that require custom compute shapes or special-purpose hardware, we also offer bespoke hardware configurations. 

Bare Metal Solution uses OEM hardware that is certified for many ISV software applications as well as custom built applications, including those built on Oracle Database. These hardware configurations are offered as a subscription, billed monthly with a preferred term length of 36 months. There are no data ingress and egress charges between Bare Metal Solution and Google Cloud in the same region; customers are responsible for provisioning adequate bandwidth for their business needs.

Legacy apps are no barrier to cloud

Google Cloud is the preferred destination for organizations building cloud-native applications as well as migrating existing on-premises applications, bringing reliable infrastructure, leading data analytics capabilities, and a culture of innovation to your IT environment. Whether you’re looking to build new applications in the cloud or to overhaul your infrastructure, we’re here to help you reach your digital transformation goals. And now, with Bare Metal Solution, we’re excited to extend the power of Google Cloud to specialized, legacy workloads. To learn more please visit our website.

Introduction

The Google Cloud Professional Services Organization’s (PSO) mission is to help our customers get the most out of Google products. PSO is responsible for customer success by sharing our technical expertise in order to unlock business value from the cloud by providing cloud strategy and best practice advice, implementation guidance, and training using our proven methodology. 

In this blog post, we want to focus specifically on Operational Health Reviews and how PSO engages in a myriad of activities to ensure the overall success and health of a customer engagement while ensuring we are meeting customer expectations and objectives, managing risk, and ultimately delivering value during or after the Google Cloud migration. We will discuss the assets, methodology, and tools that we leverage to ensure this success.

What is an Operational Health Review and what purpose does it serve?

Operational Health Reviews (OHR) are regular reviews to proactively address the below topics: 

• A customer’s support experience
• Analysis of trends in key operational metrics
• Analysis of trends in Google Cloud usage
• Status reports for high-priority cloud projects
• Discussion of upcoming events
• Discussion of potential opportunities for training
• Review of feature requests

The core aim of an OHR is to measure progress and advise customers on the overall health of the account and migration progress while providing recommendations as a team on what adjustments should be considered to ensure continued success. During the OHR, we will address any pain points as well as identify and remediate any negative trends in support interfaces and usage metrics. 

The intention of the activity is to also perform a blameless reflection for continuous improvement. This supports the effort to maintain common ground and obtain mutual optimism for the next phase of the customer’s journey on Google Cloud. 

Let’s dive a little deeper into some of the activities that go into an OHR. 

Support experience

One of the Google Cloud’s Support Organization’s goals is to simplify and streamline our customer’s support experience with a scalable and flexible set of offerings built with the customer needs at the center. This includes supporting an ongoing partnership model, with a proactive and collaborative approach. Premium Support is our top-tier support model which is a paid support offering designed for enterprises that run mission critical workloads and require fast response times, platform stability, and increased operational efficiencies. As part of this offering, customers are provided with a Technical Account Manager (TAM) who is in charge of delivering frequent touchpoints, including OHRs. 

During the support experience section of an OHR, some of the following topics may be reviewed:

• Case volume by priority
• Case volume by product
• Cases linked to Google Cloud incidents
• Escalated cases or incidents
• Case initial response time (IRT)
• Case IRT SLO Met Rate
• Case total resolution time (TRT) hours

The purpose of this activity is to better understand the efficiency of both the customer’s and Google’s cloud operations from a support trend perspective. The goal is to celebrate any positive trends, but also to identify potential negative trends and proactively determine a remediation strategy. 

Status reports for high-priority cloud projects

The purpose of this part of the OHR is to ensure the senior management stakeholders have continued visibility into the status of all their high-priority cloud initiatives with an easy-to-read, sometimes color-coded assessment on the status of each project. The assessment [Figure 1] may include, but is not limited to potential identified risks, key next steps, key stakeholders, and a mitigation plan for any high priority issues that may occur during their migration engagement. Additionally, the TAM may also cover any upcoming milestones or events, as well as any potential anticipated future blockers [Figure 2]. 

Review trends in Google Cloud usage

This part of the OHR is meant to provide the customer with a holistic view of their overall Google Cloud usage. The purpose is to provide understanding around what products are being used on Google Cloud and also where cost is generally being allocated for overall cost management and budget tracking purposes. This can help customers with their overall cost optimization efforts. Some of the metrics we may cover in this section are:

• Current Google Cloud usage by service
• Google Cloud growth trends
• Google Cloud growth trends by service
• Google Cloud growth trends by project
• Review of used and available service credits

Feature request review and advocacy

TAMs will work with customers to help identify product needs and advocate for feature requests with Google Product Management and Engineering teams. While feature request advocacy is an ongoing activity, during the OHR, the TAM will review any high priority feature requests that have previously been submitted, providing updates on status including potential release dates. 

When a feature is coming up for the release, the TAM can help the customer prepare for implementation (providing early Preview access, coordinating a meeting with the Product Manager to review the feature, etc.) and then continue to provide support until the feature is successfully implemented in the customer environment. Similarly, if a high priority or technical blocking feature is not yet coming available, the TAM can help offer an alternative solution that can unblock the customer in the short term. 

The OHR is also a great time for the TAM to work with the customer to ensure they have early access to new and exciting features that are in Alpha or Beta, and that would be beneficial to the customer and their environment. 

Training strategy

Training is a primary component to ensuring the overall success in adopting Google Cloud. During the OHR, a review of training metrics will be provided. This may include tracking metrics to determine how the customer is tracking towards an initially agreed upon learning plan or coming up with additional upskilling strategies as necessary. Additionally, throughout an engagement, the customer’s TAM will provide opportunities for both free and paid Google Cloud training. 

Conclusion 

PSO is the voice of customer health, maintaining priority to proactively and strategically guide large enterprise customers to operate effectively and efficiently in the cloud, both during and after the migration process. The OHR is an efficient and effective way to maintain alignment, ensure expectations and objectives are being met, manage risk, and overall ensure the success of the customer.

Learn more about our methodology and get started with Google Cloud by completing a free discovery and assessment of your migration. Alternatively, if you’d like to engage directly with our PSO team on your migration, contact us!

May is a big month for the security industry. It’s been over a year since we gathered for RSA in San Francisco for one of 2020’s last major in-person events. While we likely won’t be together in person this year, it’s an important time for the security community to come together and reflect on many accomplishments, and to consider the challenges still ahead of us. As the world focuses on security incidents and all the risks that still need resolving, it is important to stand back, on occasion, and also note that immense progress has been made by large numbers of small, medium and large enterprises to protect themselves and their customers against increased threats. What is also amazing is to see organizations do this while accelerating their digital transformations, supporting and protecting customers and managing ongoing remote working challenges. We are privileged to play our part in supporting those great teams. 

It’s also been a busy month for us here at Google Cloud since our inaugural CISO perspectives blog post in April. Today, I’ll recap our cloud security and industry highlights, a sneak peak of what’s ahead from Google at RSA and more. 

Thoughts from around the industry 

• Risk Governance of Digital Transformation in the Cloud – In our latest Office of the CISO whitepaper, we shared guidance on both the challenges and opportunities of cloud transformation for Chief Risk Officers, Chief Compliance Officers, Heads of Internal Audit and their teams. A misconception we sometimes see among these executives is that moving to the cloud creates more risk to manage. Having held these leadership positions in previous roles, I believe that the cloud is as much a means of managing security, resilience and other risks as it is a risk in its own right. The whitepaper dives deep into considerations for each of these leadership functions as their organization embarks on a digital transformation journey. 
• The importance of meeting global compliance requirements – Compliance is critical for building trust with customers in regulated industries, especially the public sector. It is worth remembering that in any critical industry, where there can be material impact from incidents, strong industry practices and standards to protect customers are vital (I wrote about this last summer). At Google Cloud, we’re regularly adding new compliance and security certifications to meet our customers’ needs globally. Recently, we expanded our list of FedRAMP High-certified products to include Cloud DNS, and helped our customers in the Asia-Pacific region address various compliance requirements to meet new government regulations for security and data protections. Google Cloud was also the only cloud service provider to complete an annual pooled audit with the Collaborative Cloud Audit Group (CCAG), which is a syndicate of 39 leading European financial institutions and insurance companies who depend on cloud infrastructure and technologies to deliver innovative solutions and experiences for their customers. Having spent most of my career in the financial services industry, I know firsthand the importance of managing risk assessments for outsourced vendors to provide the necessary assurances customers need from their cloud providers. 

RSA 2021 

We have a great lineup of speaking sessions and keynotes from Googlers at RSA this year. Below are the highlights you don’t want to miss: 

• I’ll be doing a session on May 20 about supply chain resilience, where a panel of experts will dive into how we can adjust risk and security initiatives to handle the next “punch to the supply chain.” Additionally, on May 18 I’ll join many of my esteemed CISO leaders from various industries and governments for a keynote discussion on our top security insights, lessons learned and best practices for how we move forward as an industry to address the next wave of challenges. 
• Google’s Senior Director of Information Security Heather Adkins will deliver a session on how to build secure and reliable systems at scale, which will cover principles from Google’s Site Reliability Engineering book with the same title (available for free download here). I’m most looking forward to Heather’s advice for how we as an industry can reshape our security thinking, based on modern architectures and technologies that can help organizations design scalable and reliable systems that are fundamentally secure.
• Nelly Porter, Senior Product Manager at Google Cloud Security, will participate in a panel discussion with security experts on the importance of Confidential Computing technology, how it’s changing the security landscape and where it’s headed. Google Cloud has made great progress in delivering a Confidential Computing portfolio for our customers in regulated industries over the past year, and we’re excited for new milestones in 2021. 

Google cloud security highlights

• Infrastructure and SRE spotlight – Before I joined Google Cloud, I always admired the infrastructure and benefits this organization delivers that are uniquely Google – from the subsea cable innovations to SRE inventions and principles. Security and resiliency are baked into every layer of our infrastructure. Many of the Googlers who build and support our platform have sat in the same seat as our customers, so they understand those needs intimately. Over the last few months it’s been amazing to watch our technical infrastructure team grow, and the direct reliability, operational resilience and security benefits that team brings to our customers. For example, we’ve opened a new region in Poland, announced the first subsea cable that will directly connect the U.S. to Singapore with fiber pairs over an express route, and released an SRE book focused on how organizations can complete a successful cloud migration.
• New security foundations blueprint guide – As part of our mission to deliver the industry’s most trusted cloud, we strive to operate in a shared-fate model for risk management in conjunction with our customers. This includes sharing opinionated step-by-step guidance with key decision points and focus areas for how our customers deploy workloads in Google Cloud. This is why we’ve updated our Google Cloud security foundations guide and corresponding Terraform blueprint scripts. These blueprints are tremendously helpful to many stakeholders within an enterprise, like a CISO that needs to understand our key principles for cloud security, or a C-Suite business leader that needs to quickly identify the skills their teams need to meet an organization’s security, risk, and compliance needs on Google Cloud. 

When we think about the types of features to build into products, we have many principles we follow. But the two that I keep coming back to as crucial are:

1. The need for secure products not just security products. All products should have security built in and while we do build great security products our security and other teams remain focused on constantly enhancing the base levels of security and the security features in all our products. 
2. Defense in Depth. We don’t just focus on defense in depth from attacks – for ourselves and our customers. We also prioritize defense in depth from configuration errors or other hazards. 

As you see below in some of the highlights of new features and products, these represent our commitment to secure products and all forms of defense in depth. 

• Workload identity federation – Service account keys are powerful credentials, and can represent a security risk if they are not managed correctly. A safer approach is to use workload identity federation, using IAM to grant external identities IAM roles, including the ability to impersonate service accounts. This lets you access resources directly and eliminates the maintenance and security burden associated with service account keys. We also offered related overall guidance on the best way to use and authenticate service accounts on Google Cloud.
• VPC-SC Directional Policies – With VPC Service Controls (VPC-SC), admins can define a security perimeter around Google-managed services to control communication to and between those services. Using VPC-SC, you can isolate your production GCP resources from unauthorized VPC networks or the internet. But what if you need to transfer data between isolated environments that you’ve set up? VPC-SC directional policies is a new secure data exchange feature that allows you to configure efficient, private, and secure data exchange between isolated environments. 
• Anthos service mesh supports VMs as well as clusters – Most enterprise compute resources are still in VMs and many will remain there for a long time to come. In Anthos 1.7,  your VM-based workloads can now take advantage of the same mesh functionality as your container-based workloads.
• Cloud Spanner CMEK and Access Approvals – Cloud Spanner is Google Cloud’s fully managed relational database that offers unlimited scale, high performance, strong consistency across regions and high availability. Spanner now supports customer-managed encryption keys (CMEK) and Access Approval, Google Cloud’s industry-leading controls to require approval before access to your content by Google support and engineering teams.
• External Key Manager enhancements – In early 2020 we launched Cloud External Key Manager (Cloud EKM), the industry’s leading Hold-Your-Own-Key (HYOK) product. Using Cloud EKM, the keys used to protect your data stored and processed in Google Cloud are completely hosted and managed outside of Google Cloud infrastructure. Cloud EKM initially launched with support for BigQuery and GCE/PD;  we expanded support for Cloud SQL, GKE, Dataflow Shuffle, and Secret Manager, with CMEK support currently in beta. We also provided in-depth documentation on the functionality, architecture and use cases for Cloud EKM in a new whitepaper.
• Web App and API Protection solution –  Web applications and public APIs are increasingly important to how organizations interface with their customers and partners, and we’ve seen increased investment in tools to protect these resources from fraud and abuse. Google Cloud’s new Web App and API protection solution is based on the same technology Google uses to protect its public-facing services against web application exploits, DDoS attacks, fraudulent bot activity, and API targeted threats. It provides protection across clouds and on-premises environments.
• Threat Intel for Chronicle – Most threat intelligence feeds require security teams to do the implementation and legwork. With our new Threat Intel for Chronicle offering, however, our intelligence insights are applied automatically across your security telemetry to present unique observations within your environment. Threat Intel for Chronicle is exclusively curated for enterprise customers by Uppercase, Google Cloud’s intelligence research and applications team to provide our perspective on threats across the internet and surface them as relevant alerts.

That wraps up another month of thoughts and highlights. If you’d like to have this Cloud CISO Perspectives post delivered every month to your inbox, click here to sign-up, and we’ll see you in June!