This page shows you how to manage reports using Risk Manager on Google Cloud.
Before you begin
- Complete the onboarding steps for your organization.
- Configure Risk Manager.
Create a report
A report is an organization-level object that aggregates information from Cloud Asset Inventory and Security Command Center to build an aggregate view of risk across your organization. These reports are aligned to the CIS Google Cloud Computing Foundations Benchmark v1.0.0. For more information on this framework, see Vulnerabilties findings.
To create a report, follow these steps:
Web UI
-
In the Google Cloud console, go to the Risk Manager page.
-
On the Risk Manager page, click Create new report.
When the report has finished, you will see a green circle with a check mark. You can now click the date in the Created on column to view the report.
Download a report
After you create a report, you can download it.
To download a report, follow these steps:
Web UI
-
In the Google Cloud console, go to the Risk Manager page.
-
Click the date of the report that you want to download.
-
On the report view page, click Download.
Approve a report
If you have the Report Reviewer role, you can approve a Risk Manager report. If you select Approved to share the report will be able to be sent to insurers. If the report is Unreviewed, the system generates a warning when a user attempts to send that report to insurers. If you select Do not share, the report cannot be sent to insurers.
This responsibility often lies with the treasury team in larger organizations.
To approve a report, follow these steps:
Web UI
To approve a report, follow these steps:
-
In the Google Cloud console, go to the Risk Manager page.
-
On the Risk Manager page, view an individual report by clicking the date in its Created on column.
-
In the page that opens, in the Status field, select whether the report is approved for sharing.
Send a report to insurance carriers
Risk Manager lets you send reports to partners who can provide cyber insurance policies. Our partners, MunichRe and Allianz can use Risk Manager reports to potentially reduce the cost of cyber insurance policies designed for Google Cloud customers.
Once you have created a report, and it has optionally been approved, you can send it to insurance carrier partners.
Reach out to your broker
A number of insurance brokers are able to advise you on the cyber insurance policies provided by our partners. To learn more, reach out to any of the following brokers:
| Broker | Contact |
|---|---|
| Aon | GCRiskManager@aon.com |
| Marsh | cyber.risk@marsh.com |
| Willis Towers Watson | CPP@willistowerswatson.com |
| Lockton | cyber@lockton.com |
| NFP | riskmanager@nfp.com |
Send the report
Once you have an approved report and you've contacted your broker, you can send that report using Risk Manager.
To send a report to our insurance carrier partners:
Web UI
To send a report, follow these steps:
-
In the Google Cloud console, go to the Risk Manager page.
-
On the Risk Manager page, view an individual report by clicking the date in its Created on column.
-
On the report view page, make sure the report has a status of Approved to share in the top left corner. Then, click Send at the top of the page.
-
On the Send page, do the following steps:
- Select your organization's insurance broker.
- Enter an email address to receive a notification that a report has been sent.
- Acknowledge that you have authority to send the report.
- Click Agree.
-
In the Confirmation dialog, enter the name of your organization to confirm that you wish to send the report to our insurance carrier partners.
After you send the report, our partners will have access to the report and your Organization ID.
-
Click Send to send the report to our insurance carrier partners.
What's next
- Learn more about Risk Manager.
- Learn how to remediate findings.