Google’s new Security Command Center Enterprise (SCC Enterprise) could streamline cloud risk management through AI automation, saving security teams time, experts say. Enhanced with Mandiant threat intelligence and generative AI, SCC Enterprise aims to offer comprehensive insights across the cloud security lifecycle. Google Cloud has identified gaps in the protection provided by current cloud-native application protection platforms (CNAPPs) and introduced SCC Enterprise as a solution to better guard against emerging threats.
“There are two things that Security Command Center Enterprise addresses compared with previous solutions: tighter integration between cloud and enterprise security and coverage across multi-cloud rather than just operating in silos,” Narayana Pappu, CEO at Zendata, a San Francisco-based provider of data security and privacy compliance solutions said in an interview. “Automation and integration of Gen AI brings efficiencies that will save teams time as well.”
According to Suni Potti, VP/GM of Google Cloud Security, the new platform integrates Mandiant Threat Intelligence with modern SecOps capabilities, enabling swift responses to cloud security incidents through “SIEM-powered visibility and SOAR-driven accountability.”
SCC Enterprise provides a single view
“Security teams can get a single view of their posture controls, active threats, cloud identities, data, and more, while integrating remediation and issue accountability into the end-to-end workflows of a converged cloud risk management platform,” Potti wrote in a blog post.
Google’s SCC Enterprise is built to analyze security data across different cloud platforms and visualize it in easy-to-understand visuals. It uses AI to help people who aren’t experts in managing complex cloud security. The system also includes Mandiant Hunt’s threat intelligence, which security teams can access whenever they need extra know-how. SCC Enterprise expands on what Google’s regular security services offer. It has more advanced tools for handling security threats in Google Cloud, Amazon Web Services (AWS), and Microsoft Azure, the company claims. The focus is on finding and fixing vulnerabilities and detecting specific kinds of threats that can happen in cloud setups.
Responding to IaaS threat and misconfigurations
The idea behind SCC Enterprise is to streamline responses to threats and misconfigurations within infrastructure as a service (IaaS) platforms like Google Cloud, AWS, and Azure by adding in native threat intelligence and a more flexible, workflow-based response toolkit, Guy Rosenthal, vice president, product, at DoControl, a New York City-based provider of automated SaaS security said in an interview. Google’s solution aims to speed up the process of fixing security issues, which could lower risk by reducing the time systems are vulnerable and minimizing delays caused by human response.
