The Google Cloud security checklist is designed to be:

A secure foundation is essential for tech innovation. As organizations embrace agentic AI, they should also continue to prioritize cloud security and risk management.  

To help organizations better manage security requirements and set configurations, today we’re publishing a recommended security checklist inspired by the Minimum Viable Secure Product (MVSP) principles. These curated controls provide a clear starting point that can help shift security from a perceived blocker to a critical business enabler. 

By providing a clear path to security excellence, the checklist is already helping customers build more resilient and secure cloud environments. Organizations with early access to the checklist told us that it enabled them to immediately identify and activate critical security controls, and helped them transform their security baseline from a work-in-progress to a hardened foundation in a single session. 

Research into cloud security best practices has found that even as organizations steadily moved to the cloud ...