Question

Your organization is bootstrapping its Google Cloud environment. The security operations team must automatically receive Google's security-related notifications (such as vulnerability alerts and platform security bulletins) for every project in the organization, while a separate finance team should receive billing notifications. Leadership wants this routing to apply to all current and future projects without manually configuring each project. What is the most effective way to configure this?

Accepted Answer

Set Essential Contacts at the organization node, assigning the security team's email to the 'Security' notification category and the finance team's email to the 'Billing' category, so contacts are inherited by all folders and projects.

Answer

Add both teams as IAM members with the Viewer role at the organization level so they can view all notifications in the Cloud Console.

Answer

Create a Cloud Monitoring notification channel for each team and add alerting policies in every project to forward security and billing events.

Answer

Configure Essential Contacts individually on each project, subscribing the appropriate team to each notification category, and repeat the setup whenever a new project is created.