Question

A financial services company is evaluating Google Cloud and is concerned about being left alone to figure out secure configurations after migration. Their CISO asks how Google Cloud's security model differs from a traditional 'shared responsibility' arrangement where the provider simply defines a boundary and hands off everything above it to the customer. Which Google Cloud trust principle best addresses this concern?

Accepted Answer

Shared fate, where Google actively helps customers achieve secure outcomes through secure-by-default products, blueprints, and guidance rather than only drawing a responsibility line

Answer

Data residency, which guarantees that all customer data and security obligations remain within a single geographic region

Answer

Access Transparency, which shifts all configuration responsibility to Google support engineers

Answer

The CIA triad, which assigns confidentiality tasks to the provider and integrity tasks to the customer