Google Cloud today announced several new security features and an updated framework aimed at enhancing threat detection, identification and response, along with assisting companies in sharing threat intelligence and defending their environments.
Leading the list, Google Cloud has expanded its security capabilities by making Mandiant Managed Defense for Google Security Operations generally available for U.S.-based customers. The service integrates Mandiant’s threat hunting and incident investigation expertise with Google’s built-in security operations platform to offer users real-time threat detection and response.
The enhanced Managed Defense offers users automated threat identification and risk analysis to prioritize rapid investigations and incident remediation. It does so by continuously updating its coverage with insights from Mandiant’s own threat hunts to make sure that organizations stay protected against the latest attack techniques and cyber risks. The service allows security teams to focus on strategic cybersecurity work by reducing the burden of routine alert triage and incident response.
Prior to its general availability today, existing Google Security Operations customers such as Vertiv Group Corp. have already seen improved operational efficiency through the layering of Mandiant’s services into their existing Google Security Operations, delivering, in its words, “a force multiplier.”
Alongside Mandiant Managed Defense for Google Security Operations, Google has also today introduced Private Collection Sharing for Google Threat Intelligence, a new service designed to enhance secure collaboration between trusted organizations.
The feature has been designed to allow companies to share vital threat intelligence, such as indicators of compromise, tactics, techniques and procedures, along with strategic insights with colleagues and industry partners. The idea is that by creating confidential, secure spaces for this exchange, organizations can foster stronger cooperation in combating modern cyber threats.
“Collaboration is critical to foster true resilience when it comes to the systems and networks we rely on every day,” said Phil Venables, chief information security officer at Google Cloud.
Rounding out the three announcements is the release of the second edition of its Defender’s Advantage framework, aimed at helping organizations optimize their cyber defenses by leveraging their unique internal knowledge.
The framework provides a structured approach to security, focusing on how intelligence drives critical defense functions such as detection, response, validation, threat hunting and mission control. This updated version offers organizations practical guidance on identifying redundancies, gaps, and opportunities to improve their cybersecurity posture.
As with the first release of Defender’s Advantage framework last year, the framework allows organizations to make better use of their “home-field” advantage, tapping into deep knowledge of their own systems to give a significant edge over external attackers. The new edition also includes insights on how to operationalize intelligence, enabling security teams to be more proactive and better prepared to mitigate cyber threats effectively.
The new version of The Defender’s Advantage is available from Google Cloud here.