Security Command Center is a cloud-based risk management solution that helps security professionals to prevent, detect, and respond to security issues. It helps to keep your cloud environment secure by providing tools to monitor and manage the following areas:
- Vulnerability detection: Discover and remediate problems such as misconfigurations, publicly exposed resources, leaked credentials, and resources with known risks. Monitor compliance against common security benchmarks like NIST, HIPAA, PCI-DSS, and CIS.
- Threat detection and mitigation: Detect and respond to active threats such as malware, cryptocurrency miners, container runtime attacks, and distributed denial-of-service (DDoS) attacks.
- Postures and policies: Define and deploy a security posture to monitor the status of your Google Cloud resources, and address posture drift when it happens. Check for and correct over-permissioned accounts.
- Compliance and data security frameworks: Define and deploy frameworks and cloud controls to monitor the status of your Google Cloud resources, enforce data security, and address drift when it happens.
- Data export: Export findings to BigQuery and Pub/Sub for further analysis.