Google Cloud unmanaged accounts [GCP SECURITY WEEK #1]

Google Cloud unmanaged accounts

Do you know how many of your employees have a Google account with their business email address? No? A lot of companies will be able to give a rather vague answer to this simple question, because they do not know what it is about in detail and why this is of enormous importance. In the course of our Google Cloud security campaign, we would like to devote the first part to the topic of “unmanaged accounts” and examine it in more detail, since from our experience, almost every company is affected by this.

Often, companies and IT managers are not aware that their employees can easily create Google accounts with their business email address. The only requirement is access to the corresponding email inbox and a Google account is created within a few moments. In most cases, non-managed Google accounts or so-called consumer accounts will often be found in the marketing department. The reason for this is relatively simple, the prerequisite for using Google’s advertising services is a Google account.

Dies hat dann zur Folge dass oftmals weitere Google Dienste in Anspruch genommen werden, da sie einfach nahtlos und unkompliziert ineinander greifen. Beispiele hierfür können die Google Marketing Plattform mit Google Data Studio, Google Drive und Google Sheets sein.

Why is it important to have control over Google Cloud unmanaged accounts?

The risk that comes with unmanaged accounts is that IT staff have no control over them and therefore cannot set policies that are standard in organizations. This could be, for example, password policies or approvals for certain services or the usage of applications in the Google Ecosphere. Ignoring this fact increases the risk of establishing “shadow IT” in the company immensely. Employees use services like Google Drive without the consent and control of IT, which also increases the risk of data exfiltration many times over.

But don’t worry, this circumstance can also be solved relatively easily and with a few simple steps. As part of our campaign, we are offering a free audit of your domain with Google to get an overview of the situation at your company. Sign up below and secure your spot!

Sollten wir dein Interesse darüber hinaus an der Thematik geweckt haben, dann begleite uns in den kommenden Wochen durch unsere Google Cloud Security Weeks und erfahre was für zusätzliche Features und Gimmicks mit der Google Cloud möglich sind.

Google Cloud unmanaged accounts [GCP SECURITY WEEK #1]