2020 saw an unprecedented change in consumer behaviour around the world, with shoppers finding new ways of discovering, evaluating and buying products. This has created fresh expectations for both brands and retailers to drive consumer closeness, embrace the digital moment and transform their operations to be more agile and sustainable. These themes have been top of mind in my conversations with our CPG customers, and set the tone at Google Cloud Summit for Retail and Consumer Goods, which concluded this week. I couldn’t be more proud of our team and thankful for our customers that supported us by participating in our sessions and attending the event.

I joined Google Cloud in January 2021 after a long career in the CPG industry, and as I shared in my CPG keynote at the summit, I am thrilled to be helping bring the power of Google to drive industry innovation in CPG. At Google we call this ‘new normal’ the transformation cloud era, where we’re working with customers who want to not just save money on storage or compute, but to use cloud and digital technologies to drive agility across their business. I also call it the era of ‘consumer switching’, because Covid-19 has accelerated the likelihood of consumers to switch brands or the way they shop. Some of these changes are still happening; over 40% shoppers in a recent Google survey reported that in March 2021 they changed brands or shopped online for something they were previously buying in store.

At Google, we have an amazing team of strategists who have been researching, observing, and analyzing the many facets of consumer behavior over the last few years. In the opening keynote at the Summit Capturing the Hearts and Minds of Today’s Consumers, Google’s Human Truths Team kicked off the Retail & Consumer Goods summit by sharing some of their consumer insights, including what behavior patterns they think will “stick” as we move into a post-pandemic world.  I think these insights are especially relevant for brands, as they speak to some of our latest findings on the CPG shopper’s mindset.

Accenture estimates that there could be a 3 trillion dollar shift in value between companies as a result of consumers shifting brands and behaviours. While it is not known who the winners of the shift will be, one thing is certain – those who will be able to leverage data and analytics fastest will benefit the most from these times of rapid change. I shared some of the implications for the CPG industry in my keynote How to grow brands in times of rapid change along with the three key areas in which Google cloud is helping CPG companies drive brand success: 

1. Unlocking consumer growth with data powered insights 
2. Transforming go-to-market in the omnichannel ecosystem
3. Driving connected, efficient, and sustainable operations

Let’s take a quick look at each of them:

Unlocking consumer growth with data-powered insights

The digital marketing ecosystem is transforming for a privacy centric world, and brands are seeing a direct impact in marketing effectiveness. As the CPG industry becomes more consumer-centric and shifts more toward direct-to-consumer (D2C) business models, acquiring and activating consented first-party consumer data presents a clear opportunity to capitalize on new consumer demands. 

As a result, CPGs are turning to consumer data platforms (CDPs) to help them unify, manage, enrich, and secure all of their disparate data from different marketing tools, website analytics, email campaigns, loyalty programs, and more. Google Cloud and our ecosystem of partners can help CPGs build a privacy-centric CDP which brings together all their customer and marketing data into a modern data warehouse, with built-in predictive data visualization tools and models. With a CDP built on Google Cloud, you can integrate data from Google Marketing Platform to drive predictive marketing and media effectiveness. And with pre-built connectors you can also easily integrate non-Google media and data from other enterprise platforms like SAP and Oracle to leverage consumer data for more integrated decision making. Democratize access to data across the organization with our Business Intelligence tool Looker to enable faster decisions in real-time from marketing to supply chain to product innovation.

At the Retail & CPG Summit we shared how retailers and brands can drive consumer closeness in a privacy-centric world  featuring Procter & Gamble’s experience building and activating consumer data in a privacy-safe way to serve consumers better and maximize marketing effectiveness and drive growth across their business. And in a demo, Constellation Brands shared how they’re leveraging real-time data from several commercial sources using Looker to unpack insights and develop action plans.

Transforming go-to-market in the omnichannel ecosystem

Amidst COVID-19 restrictions and rolling lockdowns, ecommerce activity has surged past a point of no return. Direct to consumer (D2C)  or digitally native brands were able to minimize consumers switching during the pandemic  by offering a great online experience. While in-person shopping remains important, consumers are expecting more digital and omnichannel experiences and many will continue to explore new brands and purchase online. CPGs that want to maintain their market leadership can no longer afford to ignore the key role omnichannel capabilities will play in capturing the attention of both retailers and consumers.  Even if D2C sales are not a big portion of your business, you will benefit from first-party data that can help you drive insights and product innovation. 

CPG brands want to transform their older, clunky ordering processes into modern digital shopping experiences. Re-platforming legacy solutions on Google Cloud not only accelerates application innovation, but also makes it easier to quickly launch new features and products. At Google Cloud we have transformed ecommerce for large D2C brands and traditional retailers, so we know what a best in class D2C experience looks like. And we can bring it to your brands. We already help some of the biggest brands in retail modernize ecommerce and enhance product discovery with solutions like Visual Search and Recommendations AI. All of these can help you build a best in class omni channel presence for your brands.

We had several sessions on improving your omni channel experience, including 

Why search abandonment is the metric that matters featuring Macy’s and Conversational Commerce with Google with Albertsons, where we shared how Google’s conversational experiences can help consumers message businesses from wherever they are, and whenever they need them.

Driving connected, efficient, and sustainable operations

The superpowers of  AI/ML are not just for marketing.  Did you know that research from MIT and Google Cloud has found companies that use AI/ML can drive 2x more data-driven decisions, 5x faster decision making, and 3x faster execution? By connecting your operations in real time with demand signals like search, trends, weather, mobility and supercharging this data with AI and ML, you can make smarter and quicker business decisions. For example, you can use search trends to drive demand forecasting and ramp up manufacturing for popular products.

Google Cloud can help you modernize legacy business applications by migrating them to the cloud and using AI/ML and smart analytics to drive business outcomes. Take SAP for example – a Forrester study found that modernizing SAP with Google not only resulted in 56% more efficient IT teams – it also generated 160% 3-year ROI. 

SAP data on Google Cloud breaks down silos across SAP, marketing, manufacturing systems, and external data sources for next-level intelligent operations. For example, with SAP and Google Cloud, you can combine product, media, CRM, digital commerce and site data from SAP and non-SAP sources to uncover stronger consumer insights and fuel product discovery along the path to purchase. You can merge SAP product and sales data with consumer,  market data and Google geo trends to drive targeted promotion outcomes, maximizing the ROI of promotional dollars across retail channels. You can also integrate supply chain and manufacturing data from SAP systems with consumer, marketing and Google geo market data to improve demand forecasting and optimize supply chain logistics. The possibilities are endless. This is why we describe SAP modernization as The Gift That Keeps On Giving. Check out the session on SAP from the Summit and hear from Rodan + Fields on their experience of modernizing SAP on Google Cloud. 

Another solution that excites me is Vertex AI, which transforms the demand forecasting process. Traditional demand forecasting accuracy is a challenge for most CPGs. Current forecasting methods do not take into account granular factors that impact demand, like local weather, demographics, or unforeseen events. With our recently launched Vertex Forecast, Google is making it much easier to start using cutting-edge machine learning models for demand forecasting. In our session Demand Forecasting: Time for Intelligence, Not Intuition featuring American Eagle Outfitters, we share how you can adopt a data science approach to demand forecasting that’s customized to your unique needs.

CPG organizations come to Google for help solving their toughest problems, whether it be driving new consumer growth, unlocking new routes to market, or building connected, sustainable operations. And we bring the best of Google: innovation, culture, infrastructure, AI/ML, and a deep understanding of consumer behaviour to help them build best-in-class brands. 

I’d like to end with a topic that’s very close to my heart. This is around Solving for Sustainability in Retail and Consumer Goods. Our research shows that 62% of shoppers cared about at least one sustainability aspect when purchasing online in 2020. In addition, the events of the past year have triggered consumers to re-evaluate their relationships with brands and prioritize those that are more sustainable in the context of the pandemic. Watch this session to learn more about how retailers and consumer goods companies can leverage technology, data, and machine learning to help make sustainability a core part of the recovery.

All our session content is available on demand. Ready to learn more about how we’re helping CPG brands and manufacturers drive results? Learn more about Google Cloud’s consumer packaged good solutions and reach out to your Google Cloud sales executive to set up a deeper conversation on how we can help you grow your brands today and in the future.

In the fragmented world of U.S. healthcare, patients often have to wait in line or on hold, navigate multiple patient portals, and fill out numerous request forms—all in pursuit of their own medical history. Healthcare technology startup PicnicHealth is on a mission to put control back with the patient, where it belongs.

PicnicHealth’s growth, from closing successful venture rounds to winning machine learning (ML) competitions, speaks to not only improvements and opportunities in healthcare, but also how startups are leveraging Google Workspace and Google Cloud services to accelerate momentum.

The company does the heavy lifting of collecting records and leverages human-in-the-loop ML to transcribe and validate them with an abstraction team of medical professionals. The records are then structured into a complete medical history that patients can access and share with providers to get better care.

But PicnicHealth helps to improve patient health on more than one front. It allows patients to contribute their data to de-identified medical research, building high-quality, anonymized datasets that researchers and life sciences companies can use to better understand disease progression and treatment in the real world.

Google Workspace has been part of PicnicHealth from day one, helping the founders collaborate and shape the company’s vision using cloud-synced documents and spreadsheets to collaborate and model predictions. “I’ve had a Gmail account since 2006, and in college 100% of people worked out of Google Docs. Workspace continues to be the best choice for online collaboration, and that’s why it’s still the default standard for startups,” said Troy Astorino, CoFounder & CTO of PicnicHealth. “When we started PicnicHealth, my co-founder Noga Leviner was in San Francisco and I was in Southern California, and of course we used Workspace.”

Today, Google Workspace continues to play a central role in the company’s collaboration. “We create design documents in Google Docs, primarily for engineering and product changes, and get really healthy, vibrant discussions through comments,” noted Astorino. “This practice has grown beyond engineering and is used for everything from how the company operates to communication norms.”

Google Workspace offers everything the team needs to collaborate, no matter where employees are. PicnicHealth’s team has spread from San Francisco to being distributed across the country and around the world. Instant collaboration is crucial.

“We work in a complex domain where people need a lot of information to make good decisions,” said Astorino. “Google Workspace allows us to operate in a mode of default transparency, where people can easily get the information they need even if it wasn’t intentionally or directly shared with them. Whether it’s working in Docs or scheduling in Calendar, we can operate much more effectively than we could otherwise.”

By any measure, PicnicHealth’s trajectory is one of record success. The startup is a 2014 alumni of Y Combinator, a program that helped launch household names like Airbnb, DoorDash, and Dropbox. Three years later, the team went on to win the $1 million grand prize at Google’s Machine Learning Competition. And the momentum has continued— PicnicHealth has recently announced a $60 million Series C round, bringing the amount raised to date to over $100 million. With the Series C, PicnicHealth is investing in expanding its reach to more patients across over 30 diseases.

As a healthcare startup, PicnicHealth faced a very particular set of challenges, especially when working with and accessing data. Data fragmentation and interoperability are only some of the challenges of realizing the value of big data in the cloud. The healthcare industry is notoriously difficult to navigate due to sensitive data protection laws and regulations like the Health Insurance Portability and Accountability Act (HIPAA).

PicnicHealth started in the cloud on Amazon Web Services (AWS). However, after migrating over to Kubernetes and facing an expanding list of requirements for HIPAA compliance, the company started to explore alternatives.

“We needed to be HIPAA compliant, which was going to be painful on AWS, and we wanted to get away from managing and operating our own Kubernetes clusters,” recalled Astorino. “We had heard good things about GKE (Google Kubernetes Engine). And particularly valuable for us, — many technical requirements you need for HIPAA compliance are configured by default on Google Cloud.”

PicnicHealth would have had to implement a lot of changes and get specialized instance types to get their existing configuration to work. So, they began experimenting with Google Cloud and discovered a much smoother experience.

“It was a lot easier to manage in terms of product setup and developer experience,” said Astorino. “There is a sane product hierarchy of resources you can access and use through Google Cloud and the relationships between them, from coordinated IAM (identity and access management) to using Google Groups for granting permissions. Overall, it’s cleaner.”

Astorino added that the move has also opened the doors to taking advantage of other services in the Google Cloud ecosystem like Cloud SQL, BigQuery, and Cloud Composer. PicnicHealth also uses Security Command Center because it easily integrates with everything but also helps meet various compliance frameworks’ requirements, providing visibility, near-real-time asset discovery, and security information and event management.

But most importantly, the integrated ecosystem has simplified the work needed for PicnicHealth to create a secure environment for employees to use when working with sensitive medical records while still providing all the tools they need. For example, abstractors not only use Google Workspace but also have Chromebooks because they are easy to manage and secure.

Altogether, Google Cloud helps form a technology stack that has enabled the startup to build a massive labeled dataset containing over 100 million labeled medical data concepts. In turn, it accelerates PicnicHealth’s ability to generate highly-performant AI models and feed other ML pipelines, which has been vital for processing and reviewing data at scale.

To learn more about how Google Workspace and Google Cloud help startups like PicnicHealth accelerate their journey, visit our startups solutions pages for Google Workspace and Google Cloud.

When I reflect back on the past year and the pandemic, I’m struck by how the reliance on remote work and operations has changed the fundamentals of business forever. For the financial services industry, this rings particularly true. Many conversations I’m having right now with organizations revolve around embracing a transformation cloud, and thinking of cloud computing not just as an infrastructure decision, but also as the locus for transformation throughout the company. 

Today, as we welcome the industry to our Financial Services Summit, we’ll demonstrate just how Google Cloud accelerates a financial organization’s digital transformation through app and infrastructure modernization, data democratization, people connections, and trusted transactions. We hope you’ll join us.

How we’re helping financial services firms build their transformation clouds

At Google Cloud, we continue to focus on areas where we can bring the best of our capabilities to banking, capital markets, insurance, and payments customers around the world. Our work with financial services industry customers has given us a deep understanding of the real-world, specific use cases that matter most to them. This groundwork led us to engineer products and solutions that are open and flexible, not ones that force them to rip out existing investments in ERP or other early IaaS cloud implementations. 

It’s why we’ve engineered solutions such as Lending DocAI, Open Banking with Apigee, and Datashare for financial services to help transform the industry. These solutions were created with our customers’ security and compliance top-of-mind and are built at the intersection of user-optimized experience, technology, and sovereignty.

At their core, financial institutions want to drive growth, reduce costs, mitigate risk, stay compliant, and increase efficiency. As a result, when we partner with them on their transformation journeys, we consider three essential focus areas: 

• Enabling the human experience and connected interactions
• Building an open and intelligent data foundation for better insights
• Providing the most trusted and secure cloud in the industry

Enabling humans and connected interactions

A company’s transformation is about more than technology; people and culture ultimately drive change. HSBC, for example, recognized its business users would benefit from guided answers to common questions around risk policy compliance, and turned to Google Cloud to leverage AI and machine learning bots to assist employees, ease the burden on policy experts, and improve the user experience. Using Dialogflow, a core component of Contact Center AI, HSBC was able to build a conversational platform that quickly and accurately addresses user needs at scale. 

Another example is Equifax, which used Google Workspace to support collaboration not only internally between employees, but also externally with customers. Customers can use Google Cloud solutions for financial services to build these sorts of technology-enabled human interactions quickly and easily—supporting organizational change at scale.

Building an open and intelligent data foundation for smarter, faster insights

The real impact of Google Cloud solutions for financial services comes when the whole company has access to the right information at the right time, and can act more intelligently on that data. Our solutions help businesses safely leverage their data and get a complete 360-degree view of their customers’ information, which can often be scattered across multiple systems (CRM, lending, credit, etc.). This helps financial institutions improve the overall customer experience—and sometimes even develop new products quickly. 

Indeed, all financial institutions are looking for ways to grow revenue and reduce expenses, and data can be a critical ingredient to doing both effectively. As daily transactions rise, so does the volume and complexity of data. But to implement new customer experience innovations (and new revenue streams), financial institutions must first capture data effectively. This is why AXA Switzerland, for example, uses real-time analytics on Google Cloud to gain cross-industry insights about future trends and customer preferences.

Financial services organizations also need the confidence of building on a platform that provides choice, flexibility, and agility to move fast. It’s why we have an open cloud approach that allows Google Cloud services to run in different physical locations such as on-premises, other public clouds, and the edge. Customers can also harness the power of data and AI through our open APIs, machine-learning services, and analytics engines on any major cloud platform. This is why companies like Macquarie Bank are taking advantage of Google Cloud’s open, hybrid architecture to modernize and empower its developers.

Compliant and secure to address risk and regulatory needs

As a highly regulated industry, financial services is focused on security and compliance, risk and regulations, and fraud detection and prevention. Google Cloud offers unique capabilities to earn customers’ trust as part of our continuing work to be the most trusted cloud in the industry. Google Cloud provides a secure foundation that you can verify and independently control. Our cloud technology reduces risk and data loss, because it is built on comprehensive zero-trust architecture. Finally, we offer a shared-fate model built on best practices in risk management via automation, guidance, and insurance. This is why customers like BBVA have confidence anywhere their systems may operate. 

On the regulatory front, global legislators and regulators continue to focus on the stability of the industry that only a decade ago went through one of the biggest liquidity crises in history. With this oversight comes strong expectations of risk mitigation. Google Cloud offers a single, global set of controls, reviewed by financial institutions and regulators around the world, and verified in collaborative audits—making compliance simpler and less costly for our customers.

Finally, Google Cloud allows financial services firms to operate confidently with advanced security tools that help protect data, applications, and infrastructure, as well as their customers from fraudulent activity, spam, and abuse. We help protect your data against threats, using the same infrastructure and security services we use for our own operations, ensuring you never have to trade-off between ease of use and security. Google Cloud encrypts data at-rest and in-transit. And we now also offer the ability to encrypt data-in use, while it’s being processed for customer VM and container workloads.

Let us help you with your transformation cloud journey

We’ve seen leading financial services companies embrace Google Cloud to help them move beyond infrastructure toward the next phase of their cloud evolution. This is an era where no company is better positioned to lead than Google Cloud, and we’re excited to help you with your journey.

Learn more about Google Cloud for financial services.

May is a big month for the security industry. It’s been over a year since we gathered for RSA in San Francisco for one of 2020’s last major in-person events. While we likely won’t be together in person this year, it’s an important time for the security community to come together and reflect on many accomplishments, and to consider the challenges still ahead of us. As the world focuses on security incidents and all the risks that still need resolving, it is important to stand back, on occasion, and also note that immense progress has been made by large numbers of small, medium and large enterprises to protect themselves and their customers against increased threats. What is also amazing is to see organizations do this while accelerating their digital transformations, supporting and protecting customers and managing ongoing remote working challenges. We are privileged to play our part in supporting those great teams. 

It’s also been a busy month for us here at Google Cloud since our inaugural CISO perspectives blog post in April. Today, I’ll recap our cloud security and industry highlights, a sneak peak of what’s ahead from Google at RSA and more. 

Thoughts from around the industry 

• Risk Governance of Digital Transformation in the Cloud – In our latest Office of the CISO whitepaper, we shared guidance on both the challenges and opportunities of cloud transformation for Chief Risk Officers, Chief Compliance Officers, Heads of Internal Audit and their teams. A misconception we sometimes see among these executives is that moving to the cloud creates more risk to manage. Having held these leadership positions in previous roles, I believe that the cloud is as much a means of managing security, resilience and other risks as it is a risk in its own right. The whitepaper dives deep into considerations for each of these leadership functions as their organization embarks on a digital transformation journey. 
• The importance of meeting global compliance requirements – Compliance is critical for building trust with customers in regulated industries, especially the public sector. It is worth remembering that in any critical industry, where there can be material impact from incidents, strong industry practices and standards to protect customers are vital (I wrote about this last summer). At Google Cloud, we’re regularly adding new compliance and security certifications to meet our customers’ needs globally. Recently, we expanded our list of FedRAMP High-certified products to include Cloud DNS, and helped our customers in the Asia-Pacific region address various compliance requirements to meet new government regulations for security and data protections. Google Cloud was also the only cloud service provider to complete an annual pooled audit with the Collaborative Cloud Audit Group (CCAG), which is a syndicate of 39 leading European financial institutions and insurance companies who depend on cloud infrastructure and technologies to deliver innovative solutions and experiences for their customers. Having spent most of my career in the financial services industry, I know firsthand the importance of managing risk assessments for outsourced vendors to provide the necessary assurances customers need from their cloud providers. 

RSA 2021 

We have a great lineup of speaking sessions and keynotes from Googlers at RSA this year. Below are the highlights you don’t want to miss: 

• I’ll be doing a session on May 20 about supply chain resilience, where a panel of experts will dive into how we can adjust risk and security initiatives to handle the next “punch to the supply chain.” Additionally, on May 18 I’ll join many of my esteemed CISO leaders from various industries and governments for a keynote discussion on our top security insights, lessons learned and best practices for how we move forward as an industry to address the next wave of challenges. 
• Google’s Senior Director of Information Security Heather Adkins will deliver a session on how to build secure and reliable systems at scale, which will cover principles from Google’s Site Reliability Engineering book with the same title (available for free download here). I’m most looking forward to Heather’s advice for how we as an industry can reshape our security thinking, based on modern architectures and technologies that can help organizations design scalable and reliable systems that are fundamentally secure.
• Nelly Porter, Senior Product Manager at Google Cloud Security, will participate in a panel discussion with security experts on the importance of Confidential Computing technology, how it’s changing the security landscape and where it’s headed. Google Cloud has made great progress in delivering a Confidential Computing portfolio for our customers in regulated industries over the past year, and we’re excited for new milestones in 2021. 

Google cloud security highlights

• Infrastructure and SRE spotlight – Before I joined Google Cloud, I always admired the infrastructure and benefits this organization delivers that are uniquely Google – from the subsea cable innovations to SRE inventions and principles. Security and resiliency are baked into every layer of our infrastructure. Many of the Googlers who build and support our platform have sat in the same seat as our customers, so they understand those needs intimately. Over the last few months it’s been amazing to watch our technical infrastructure team grow, and the direct reliability, operational resilience and security benefits that team brings to our customers. For example, we’ve opened a new region in Poland, announced the first subsea cable that will directly connect the U.S. to Singapore with fiber pairs over an express route, and released an SRE book focused on how organizations can complete a successful cloud migration.
• New security foundations blueprint guide – As part of our mission to deliver the industry’s most trusted cloud, we strive to operate in a shared-fate model for risk management in conjunction with our customers. This includes sharing opinionated step-by-step guidance with key decision points and focus areas for how our customers deploy workloads in Google Cloud. This is why we’ve updated our Google Cloud security foundations guide and corresponding Terraform blueprint scripts. These blueprints are tremendously helpful to many stakeholders within an enterprise, like a CISO that needs to understand our key principles for cloud security, or a C-Suite business leader that needs to quickly identify the skills their teams need to meet an organization’s security, risk, and compliance needs on Google Cloud. 

When we think about the types of features to build into products, we have many principles we follow. But the two that I keep coming back to as crucial are:

1. The need for secure products not just security products. All products should have security built in and while we do build great security products our security and other teams remain focused on constantly enhancing the base levels of security and the security features in all our products. 
2. Defense in Depth. We don’t just focus on defense in depth from attacks – for ourselves and our customers. We also prioritize defense in depth from configuration errors or other hazards. 

As you see below in some of the highlights of new features and products, these represent our commitment to secure products and all forms of defense in depth. 

• Workload identity federation – Service account keys are powerful credentials, and can represent a security risk if they are not managed correctly. A safer approach is to use workload identity federation, using IAM to grant external identities IAM roles, including the ability to impersonate service accounts. This lets you access resources directly and eliminates the maintenance and security burden associated with service account keys. We also offered related overall guidance on the best way to use and authenticate service accounts on Google Cloud.
• VPC-SC Directional Policies – With VPC Service Controls (VPC-SC), admins can define a security perimeter around Google-managed services to control communication to and between those services. Using VPC-SC, you can isolate your production GCP resources from unauthorized VPC networks or the internet. But what if you need to transfer data between isolated environments that you’ve set up? VPC-SC directional policies is a new secure data exchange feature that allows you to configure efficient, private, and secure data exchange between isolated environments. 
• Anthos service mesh supports VMs as well as clusters – Most enterprise compute resources are still in VMs and many will remain there for a long time to come. In Anthos 1.7,  your VM-based workloads can now take advantage of the same mesh functionality as your container-based workloads.
• Cloud Spanner CMEK and Access Approvals – Cloud Spanner is Google Cloud’s fully managed relational database that offers unlimited scale, high performance, strong consistency across regions and high availability. Spanner now supports customer-managed encryption keys (CMEK) and Access Approval, Google Cloud’s industry-leading controls to require approval before access to your content by Google support and engineering teams.
• External Key Manager enhancements – In early 2020 we launched Cloud External Key Manager (Cloud EKM), the industry’s leading Hold-Your-Own-Key (HYOK) product. Using Cloud EKM, the keys used to protect your data stored and processed in Google Cloud are completely hosted and managed outside of Google Cloud infrastructure. Cloud EKM initially launched with support for BigQuery and GCE/PD;  we expanded support for Cloud SQL, GKE, Dataflow Shuffle, and Secret Manager, with CMEK support currently in beta. We also provided in-depth documentation on the functionality, architecture and use cases for Cloud EKM in a new whitepaper.
• Web App and API Protection solution –  Web applications and public APIs are increasingly important to how organizations interface with their customers and partners, and we’ve seen increased investment in tools to protect these resources from fraud and abuse. Google Cloud’s new Web App and API protection solution is based on the same technology Google uses to protect its public-facing services against web application exploits, DDoS attacks, fraudulent bot activity, and API targeted threats. It provides protection across clouds and on-premises environments.
• Threat Intel for Chronicle – Most threat intelligence feeds require security teams to do the implementation and legwork. With our new Threat Intel for Chronicle offering, however, our intelligence insights are applied automatically across your security telemetry to present unique observations within your environment. Threat Intel for Chronicle is exclusively curated for enterprise customers by Uppercase, Google Cloud’s intelligence research and applications team to provide our perspective on threats across the internet and surface them as relevant alerts.

That wraps up another month of thoughts and highlights. If you’d like to have this Cloud CISO Perspectives post delivered every month to your inbox, click here to sign-up, and we’ll see you in June!