GRCLibrary.ai

Standard

Google Cloud Platform Hardening Baseline Standard

This standard defines the hardening baseline for Google Cloud Platform environments operated by or on behalf of the organization. It expresses outcomes and control intent in vendor-neutral language and references GCP service classes by their generic role rather than reproducing vendor configuration guidance verbatim.

Type
Standard
Version
0.0.9
Date
2026-07-06
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Developer Security
Review frequency
Annual and upon material change to the cloud provider service catalogue, baseline benchmark releases, or organizational use of new service classes
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Baseline alignment
  • 4. Organization, folder, and identity
  • 5. Detective controls and logging
  • 6. Preventive controls
  • 7. Network
  • 8. Data protection
  • 9. Compute
  • 10. Storage
  • 11. Secrets and credentials
  • 12. Monitoring, detection, and response
  • 13. Supplementary services
  • 14. Labelling and inventory
  • 15. Provisioning and change
  • 16. Incident readiness
  • 17. Operating expectations
  • 18. Framework alignment
  • 19. Limitations

Frameworks it maps to

Related documents