Onboarding to Risk Manager

Preview

This product is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA products are available "as is" and might have limited support. For more information, see the launch stage descriptions.

This topic describes the process for onboarding to Risk Manager.

Overview

Onboarding to Risk Manager requires your IT organization's engagement. The Risk Manager tool is deployed as a component of Google Cloud. We expect that you'll benefit from a joint kickoff between your IT and treasury organizations, particularly when the introduction to the Risk Protection Program originates from an insurance broker or within your treasury organization.

Members of the Risk Manager team can brief any members of your IT or treasury team on the following process.

Onboarding steps

The following steps describe the process for onboarding to Risk Manager. Different teams in your organization can play a part in completing these steps. Assign these tasks to the people with the proper permissions to complete them.

Note: Your Google Cloud administrator is an employee with the ability to administer Identity and Access Management (IAM) for your organization on Google Cloud. This person is likely to be one that is responsible for the day-to-day operations or security of your cloud deployment (DevOps, Security Operations, Operations, or Platform Engineering).

1. Inform your Google Cloud administrator that they must complete the following steps as prerequisites for the Risk Protection Program.

2. Select the organization to onboard. Risk Manager is only supported for Google Cloud Organizations.

   1. Click the project drop-down list at the top of the page.

   2. In the Select from dialog, click the organization drop-down list, and select the organization to onboard onto Risk Manager.

3. Set up Security Command Center. Your Google Cloud administrator performs this step. This step is required for Risk Manager reports to be generated.

   The following table describes the Security Command Center pricing tiers and the Risk Manager functionality that they enable.

   Tier	Risk Manager functionality	Enablement
   Premium	Full	To enable the Premium tier, see Setting up Security Command Center.
   Standard	Reports contain a full set of data for analysis and insurance purposes, but links to remediation steps in Security Command Center aren't supported.	To enable the Standard tier, see Setting up Security Command Center.
   Legacy	Full	New customers can't enable the Legacy tier because it's deprecated. To upgrade to Security Command Center Standard or Premium, see Migrate from legacy Security Command Center products.

4. Ensure that the Security Health Analytics service is enabled in Security Command Center. Your Google Cloud administrator performs this step. This step is required for Risk Manager reports to be generated.

   To enable Security Health Analytics, refer to Setting up Security Command Center. Alternatively, go to the Security Command Center settings page and ensure that the Security Health Analytics service is set to Enabled by default.

   Go to Security Command Center Settings

5. Perform the remaining setup steps in by visiting Risk Manager in the Google Cloud console. Your Google Cloud administrator performs these steps as well. These steps are detailed in Configuring Risk Manager.

   Go to Risk Manager Setup

What's next?

• Learn how to configure Risk Manager.