Expanding our Risk Protection Program with new insurance partners and AI coverage
Today’s businesses have a vital need to manage and, when appropriate, transfer cyber risk in
Today’s businesses have a vital need to manage and, when appropriate, transfer cyber risk in their cloud environments — even with robust security measures in place. At Google Cloud Next last month, we unveiled significant advancements to our Risk Protection Program, an industry-first collaboration between Google and leading cyber insurers that provides competitively priced cyber-insurance and broad coverage for Google Cloud customers.
These updates make the program more accessible to more organizations, expand our specialized cyber insurance offerings, and can help increase your overall confidence in your ability to successfully manage the cyber risk your organization faces. The Risk Protection Program (RPP) is based on your cloud security posture as reported through Security Command Center (SCC), and reinforces our shared fate model as we actively partner with you for risk management.
The Risk Protection Program has two main components:
Cyber Insurance Hub, provided by Google: This tool enables a quick assessment of your risk posture across Google Cloud and facilitates a streamlined process for procuring cyber insurance.
Tailored Cyber Insurance Policies, provided by partners: These are available through a modern, low-friction underwriting process, and use data submitted by customers to enable personalized pricing based on their specific use and risk posture.
To further enhance the value and accessibility of these core components, we’re introducing several key updates.
Giving Google Cloud customers a wider array of choices for tailored cyber insurance, we’re excited to welcome Beazley and Chubb, two of the world’s largest cyber-insurers, as new program partners. We are also expanding our collaboration with our founding partner, Munich Re, through onboarding Munich Re Specialty and their SMB-focused subsidiary HSB.
This collaboration will make the Risk Protection Program available to more Google Cloud customers, extending our reach to include businesses of all sizes. We’re also expanding the program’s availability internationally, with coverage rolling out in phases, ensuring that more organizations can take advantage of the unique benefits of the program.
The Cyber Insurance Hub can help you measure and manage your risk directly on Google Cloud. It assesses your Google Cloud workloads and provides proactive security recommendations. It also generates reports that map your cloud configurations against the industry-standard CIS Benchmarks.
The hub allows you to directly share your actual risk posture data — derived from your real-world cloud setup — with participating cyber insurers through a streamlined interface. This represents a significant improvement over traditional, often lengthy, and manual insurance applications, crafting a more efficient underwriting process that can deliver potentially more competitive and appropriate pricing.
Additionally, for qualified Google Cloud digital native customers, Beazley is removing the traditional, often complex insurance application altogether and replacing it with a single-page attestation. This means an even faster, simpler path to securing tailored cyber insurance for organizations deeply integrated with Google Cloud.
The Risk Protection Program is further evolving to address the rapidly changing technological landscape, including the increasing adoption of AI. A key enhancement now available is the inclusion of Affirmative AI insurance coverage for your Google-related AI workloads. Building upon Google’s existing AI indemnification commitment, this explicit coverage provides clarity and reduces uncertainty around the unique risks associated with generative AI.
Demonstrating a commitment to future-forward risk management, Chubb’s offerings will include coverage specifically against potential future quantum exploit risks. This proactive step aligns with Google’s ongoing work in post-quantum cryptography (PQC) and helps customers prepare for potential security challenges posed by future quantum computing advancements.
Risk Protection Program clients underwritten by Munich Re receive access to Mandiant’s expertise in threat intelligence, advisory, and incident preparedness.
This expertise includes near real-time updates on high-priority exploited vulnerabilities informed by Mandiant Consulting and Google Threat Intelligence Group, technical coaching from experienced Mandiant incident responders during a cybersecurity incident, and tabletop exercises facilitated by Munich Re and Mandiant Consulting to test and enhance incident readiness with your teams.
The enhanced Risk Protection Program helps translate your dedication to security into tangible business value. By using the Cyber Insurance Hub and demonstrating strong security practices on Google Cloud, you can potentially achieve more favorable terms and pricing on cyber insurance premiums — the return on investment is clear.
We understand that navigating the complexities of cloud risk can be new to some insurers, which is why Google actively works with our cyber insurance partners to ensure they understand the nuances of the cloud, simplifying the process for you.
“Google Cloud’s Risk Protection Program has streamlined our insurance underwriting process while providing valuable insight into quantitative risks through standardized reporting, enhanced compliance monitoring, and simplified reporting to our insurance provider. This partnership underscores our shared commitment to safeguarding trust and ensuring the responsible use of data,” said Frank Caserta, CISO, LiveRamp.
“We were early adopters of RPP and it’s been a great change in our process. The program has helped us have a more efficient renewal … I just go and I press one button and it goes off to insurance partners. Because I know what data the insurance underwriters are going to be using, I can proactively respond to any questions and therefore cut down time dramatically. To organizations looking to adopt RPP, I would say do it. It makes your insurance renewal process so much more efficient,” said Justinian Fortenberry, CISO and VP of Engineering, Etsy.
At Google Cloud, we firmly believe that the cloud is more than just a risk to be managed, it is a platform for managing risk effectively. Our new enhancements to the Risk Protection Program mark a significant step forward in helping customers navigate the complexities of cloud security and risk management.
To get started, you can follow these four steps:
Discuss the Risk Protection Program with your insurance lead and broker.
Onboard to Google’s Cyber Insurance Hub, run a report, and share the report with your chosen insurance partner(s).
Work with your insurance broker to complete the cyber insurance underwriting process, and evaluate any quotes.
Contact us for more information.
Author: Ernestro Casas -
Today’s businesses have a vital need to manage and, when appropriate, transfer cyber risk in
Attacks spilled contacts and emails from targeted accounts.
Explore how AI infrastructure is transforming DOE National Laboratories, empowering groundbreaking research while tackling challenges
Learn how a self-adaptive GPU allocation framework that dynamically manages the computational needs of AI
The Institute of Telecommunications Professionals (ITP) has officially been approved as a registered training provider
