Question

A financial services company is preparing documentation for an external auditor who is assessing the organization's ability to demonstrate oversight of any Google personnel access to customer content. The security team has already enabled Cloud Audit Logs (Admin Activity and Data Access). The auditor specifically asks for evidence showing when Google support or engineering staff accessed customer content, along with the justification for that access. Which action provides the required evidence?

Accepted Answer

Enable Access Transparency logs, which record actions taken by Google personnel on customer content, including the reason/justification for the access.

Answer

Enable Data Access audit logs for all services, since they capture every read and write of customer content including those performed by Google staff.

Answer

Configure Access Approval so that all Google personnel access is blocked, then export the denied-request records as audit evidence.

Answer

Create a log-based metric on Admin Activity logs to alert whenever a Google service account modifies IAM policy on customer resources.