Managing reports

This page shows you how to manage reports using Risk Manager on Google Cloud.

Before you begin

  1. Complete the onboarding steps for your organization.
  2. Configure Risk Manager.

Create a report

A report is an organization-level object that aggregates information from Cloud Asset Inventory and Security Command Center to build an aggregate view of risk across your organization. These reports are aligned to the CIS Google Cloud Computing Foundations Benchmark v1.0.0. For more information on this framework, see Vulnerabilties findings.

To create a report, follow these steps:

Web UI

  1. In the Cloud Console, go to the Risk Manager page.

    Go to Risk Manager

  2. On the Risk Manager page, click Create.

    When the report has finished, you will see a green circle with a check mark. You can now click the date in the Created on column to view the report.

Share a report for review

After you create a report, you can share it with internal stakeholders.

Prerequisite: You must have an appropriate IAM role with the permission to grant the Report Reviewer role to members of your organization. Only members of your organization can review a report.

To share a report for review, follow these steps:

Web UI

To share a report, follow these steps:

  1. In the Cloud Console, go to the Risk Manager page.

    Go to Risk Manager

  2. On the Risk Manager page, view an individual report by clicking the date in its Created on column.

  3. On the report view page, click Add reviewers at the top of the page.

  4. In the Add report reviewers dialog, do the following steps:

    • Enter the email address of a member of your organization who should review the report.
    • Select Grant Report Reviewer role.
    • Click Save.

  5. After you share the report, the owner of the email address receives a notification that they were added as a report reviewer.

Approve a report

If you have the Report Reviewer role, you can approve a Risk Manager report. If you select Approved to share the report will be able to be sent to insurers. If you select Do not share, the system generates a warning when a user attempts to send that report to insurers.

This responsibility often lies with the treasury team in larger organizations.

To approve a report, follow these steps:

Web UI

To approve a report, follow these steps:

  1. In the Cloud Console, go to the Risk Manager page.

    Go to Risk Manager

  2. On the Risk Manager page, view an individual report by clicking the date in its Created on column.

  3. In the page that opens, in the Status field, select whether the report is approved for sharing.

Send a report to insurance carriers

Risk Manager lets you send reports to partners who can provide cyber insurance policies. Our partners, MunichRe and Allianz can use Risk Manager reports to potentially reduce the cost of cyber insurance policies designed for Google Cloud customers.

Once you have created a report, and it has been shared and approved, you can send it to insurance carrier partners.

Reach out to your broker

A number of insurance brokers are able to advise you on the cyber insurance policies provided by our partners. To learn more, reach out to any of the following brokers:

Broker Contact
Aon GCRiskManager@aon.com
Marsh cyber.risk@marsh.com
Willis Towers Watson CPP@willistowerswatson.com
Lockton cyber@lockton.com
NFP riskmanager@nfp.com

Send the report

Once you have an approved report and you've contacted your broker, you can send that report using Risk Manager.

To send a report to our insurance carrier partners:

Web UI

To send a report, follow these steps:

  1. In the Cloud Console, go to the Risk Manager page.

    Go to Risk Manager

  2. On the Risk Manager page, view an individual report by clicking the date in its Created on column.

  3. On the report view page, make sure the report has a status of Approved to share in the top left corner. Then, click Send at the top of the page.

  4. On the Send page, do the following steps:

    • Select your organization's insurance broker.
    • Enter an email address to receive a notification that a report has been sent.
    • Acknowledge that you have authority to send the report.
    • Click Agree.

  5. In the Confirmation dialog, enter the name of your organization to confirm that you wish to send the report to our insurance carrier partners.

    After you send the report, our partners will have access to the report and your Organization ID.

  6. Click Send to send the report to our insurance carrier partners.

What's next