Google Cloud Compliance FrameworksSpecialized Frameworks
GCP Forseti Security v2.26
Implemented Controls
The following controls are implemented as part of this framework.
Customer-managed encryption keys should be rotated within 100 daysIAM policies should not grant access to 'allUsers' or 'allAuthenticatedUsers'Service account keys should limit age to 100 daysIAM policies should allow only members from the organization's domainBigQuery tables should not be publicly readableFirewall rules should prohibit unrestricted SSH access from the internetFirewall rules should prohibit unrestricted TCP/UDP access from the internet to all portsBigQuery datasets should require corporate-domain access and prohibit access by gmail.com addressesBigQuery datasets should require corporate-domain access and prohibit access by googlegroups.com addressesCloud SQL instances should prohibit world-readable access