Make security simpler: Introducing the Google Cloud recommended security checklist

Google Cloud introduces a recommended security checklist based on Minimum Viable Secure Product (MVSP) principles to simplify cloud security management.

• •The checklist covers 60 security controls across 6 domains: authentication, organization resource management, infrastructure management, data protection, network security, and monitoring/logging/alerting.
• •Controls are tiered into Basic, Intermediate, and Advanced categories to scale with organizational growth.
• •Weak credentials (47%) and misconfigurations (29%) account for nearly 76% of cloud compromises according to Google's 2025 Threat Horizons Report.
• •The checklist is complemented by a GitHub repository of Terraform code for automated and consistent deployment.
• •It is designed to be AI-ready, providing foundational components needed to adopt agentic AI technologies.