Source URL: https://cloud.google.com/blog/products/identity-security/whats-new-with-google-clouds-risk-protection-program/
Source: Cloud Blog
Title: Expanding our Risk Protection Program with new insurance partners and AI coverage
Feedly Summary: Today’s businesses have a vital need to manage and, when appropriate, transfer cyber risk in their cloud environments — even with robust security measures in place. At Google Cloud Next last month, we unveiled significant advancements to our Risk Protection Program, an industry-first collaboration between Google and leading cyber insurers that provides competitively priced cyber-insurance and broad coverage for Google Cloud customers.
These updates make the program more accessible to more organizations, expand our specialized cyber insurance offerings, and can help increase your overall confidence in your ability to successfully manage the cyber risk your organization faces. The Risk Protection Program (RPP) is based on your cloud security posture as reported through Security Command Center (SCC), and reinforces our shared fate model as we actively partner with you for risk management.
New in 2025: Broader access, more choice
The Risk Protection Program has two main components:
Cyber Insurance Hub, provided by Google: This tool enables a quick assessment of your risk posture across Google Cloud and facilitates a streamlined process for procuring cyber insurance.
Tailored Cyber Insurance Policies, provided by partners: These are available through a modern, low-friction underwriting process, and use data submitted by customers to enable personalized pricing based on their specific use and risk posture.
To further enhance the value and accessibility of these core components, we’re introducing several key updates.
New insurance partners, expanded global reach
Giving Google Cloud customers a wider array of choices for tailored cyber insurance, we’re excited to welcome Beazley and Chubb, two of the world’s largest cyber-insurers, as new program partners. We are also expanding our collaboration with our founding partner, Munich Re, through onboarding Munich Re Specialty and their SMB-focused subsidiary HSB.
How Etsy weaves together security and cyber insurance through Google Cloud’s Risk Protection Program
This collaboration will make the Risk Protection Program available to more Google Cloud customers, extending our reach to include businesses of all sizes. We’re also expanding the program’s availability internationally, with coverage rolling out in phases, ensuring that more organizations can take advantage of the unique benefits of the program.
Streamlined insurance procurement and data-driven pricing
The Cyber Insurance Hub can help you measure and manage your risk directly on Google Cloud. It assesses your Google Cloud workloads and provides proactive security recommendations. It also generates reports that map your cloud configurations against the industry-standard CIS Benchmarks.
The hub allows you to directly share your actual risk posture data — derived from your real-world cloud setup — with participating cyber insurers through a streamlined interface. This represents a significant improvement over traditional, often lengthy, and manual insurance applications, crafting a more efficient underwriting process that can deliver potentially more competitive and appropriate pricing.
aside_block
Accelerated onboarding for digital natives
Additionally, for qualified Google Cloud digital native customers, Beazley is removing the traditional, often complex insurance application altogether and replacing it with a single-page attestation. This means an even faster, simpler path to securing tailored cyber insurance for organizations deeply integrated with Google Cloud.
Coverage for emerging AI risks
The Risk Protection Program is further evolving to address the rapidly changing technological landscape, including the increasing adoption of AI. A key enhancement now available is the inclusion of Affirmative AI insurance coverage for your Google-related AI workloads. Building upon Google’s existing AI indemnification commitment, this explicit coverage provides clarity and reduces uncertainty around the unique risks associated with generative AI.
Preparedness against future quantum threats
Demonstrating a commitment to future-forward risk management, Chubb’s offerings will include coverage specifically against potential future quantum exploit risks. This proactive step aligns with Google’s ongoing work in post-quantum cryptography (PQC) and helps customers prepare for potential security challenges posed by future quantum computing advancements.
Threat intelligence, advisory and incident preparedness with Mandiant
Risk Protection Program clients underwritten by Munich Re receive access to Mandiant’s expertise in threat intelligence, advisory, and incident preparedness.
This expertise includes near real-time updates on high-priority exploited vulnerabilities informed by Mandiant Consulting and Google Threat Intelligence Group, technical coaching from experienced Mandiant incident responders during a cybersecurity incident, and tabletop exercises facilitated by Munich Re and Mandiant Consulting to test and enhance incident readiness with your teams.
Translating security investments into financial returns
The enhanced Risk Protection Program helps translate your dedication to security into tangible business value. By using the Cyber Insurance Hub and demonstrating strong security practices on Google Cloud, you can potentially achieve more favorable terms and pricing on cyber insurance premiums — the return on investment is clear.
We understand that navigating the complexities of cloud risk can be new to some insurers, which is why Google actively works with our cyber insurance partners to ensure they understand the nuances of the cloud, simplifying the process for you.
“Google Cloud’s Risk Protection Program has streamlined our insurance underwriting process while providing valuable insight into quantitative risks through standardized reporting, enhanced compliance monitoring, and simplified reporting to our insurance provider. This partnership underscores our shared commitment to safeguarding trust and ensuring the responsible use of data,” said Frank Caserta, CISO, LiveRamp.
“We were early adopters of RPP and it’s been a great change in our process. The program has helped us have a more efficient renewal … I just go and I press one button and it goes off to insurance partners. Because I know what data the insurance underwriters are going to be using, I can proactively respond to any questions and therefore cut down time dramatically. To organizations looking to adopt RPP, I would say do it. It makes your insurance renewal process so much more efficient,” said Justinian Fortenberry, CISO and VP of Engineering, Etsy.
It’s easy to get started
At Google Cloud, we firmly believe that the cloud is more than just a risk to be managed, it is a platform for managing risk effectively. Our new enhancements to the Risk Protection Program mark a significant step forward in helping customers navigate the complexities of cloud security and risk management.
To get started, you can follow these four steps:
Discuss the Risk Protection Program with your insurance lead and broker.
Onboard to Google’s Cyber Insurance Hub, run a report, and share the report with your chosen insurance partner(s).
Work with your insurance broker to complete the cyber insurance underwriting process, and evaluate any quotes.
Contact us for more information.
AI Summary and Description: Yes
**Summary:** Google Cloud has launched significant enhancements to its Risk Protection Program, which offers tailored cyber insurance in collaboration with top insurers. These advancements aim to improve accessibility and affordability for businesses of various sizes, addressing cyber risk management effectively in cloud environments. Notably, the program now incorporates coverage for AI-related risks and future quantum threats.
**Detailed Description:**
Google Cloud’s recent updates to the Risk Protection Program (RPP) represent a comprehensive initiative to enhance cyber risk management and insurance procurement for cloud customers. Here are the key points and implications:
– **Risk Protection Program Overview:**
– The RPP is designed to help organizations manage and transfer cyber risk in cloud environments, strengthening confidence even when using existing security measures.
– It operates on the premise of a shared fate model, where Google partners with organizations to actively manage risk.
– **Main Components of the RPP:**
– **Cyber Insurance Hub:**
– Quick assessment of risk posture across Google Cloud.
– Streamlined process for procuring cyber insurance, allowing direct sharing of risk posture data with insurers.
– **Tailored Cyber Insurance Policies:**
– Offered by partner insurers through a low-friction underwriting process utilizing customer data for personalized pricing.
– **Recent Enhancements to the Program:**
– **Expanded Partnership:** New collaborations with Beazley and Chubb increase options for tailored cyber insurance, contributing to a global reach.
– **Coverage for Emerging Risks:** Introduction of Affirmative AI coverage specifically for risks associated with Google-related AI workloads, addressing growing concerns regarding generative AI technologies.
– **Future Quantum Threat Preparedness:** Inclusion of coverage against potential risks associated with quantum computing, in line with Google’s efforts in post-quantum cryptography.
– **Access to Threat Intelligence:** Customers get additional support from **Mandiant** for threat intelligence, incident preparedness, and training.
– **Value Proposition:**
– By using the Cyber Insurance Hub, organizations can potentially achieve better pricing and conditions on cyber insurance based on solid security postures.
– Streamlined processes for underwriting and response time reductions can translate to considerable cost savings and operational efficiency during insurance renewals.
– **Testimonials:**
– Insights from CISOs at LiveRamp and Etsy highlight the program’s effectiveness in improving the insurance underwriting process and enhancing compliance monitoring.
– **Getting Started:**
– Google Cloud outlines pragmatic steps for organizations to engage with the Risk Protection Program, emphasizing a proactive stance on cloud security and risk management.
Overall, these developments within Google Cloud’s Risk Protection Program not only address the current landscape of cyber threats but also adapt to future risks by incorporating proactive measures and strategic partnerships, making it a critical consideration for organizations operating in the cloud. The integration of AI-focused coverage further marks a notable response to the evolving technological environment.