FFF Enterprises

$3B annual revenue

Pharmaceutical

Google Cloud Platform

The cloud security assessment was driven by benchmarks and security best practices uniquely available to GCP Security Partners. Consultants ran discovery and assessment workshops, and performed detailed analysis on their current posture based on environment data available in Google Cloud Asset Inventory.

This assessment provided a lens into their existing GCP environment across eight Security Domains:

• Resource Management

• Identity & Access Management

• Network Security

• VM Security

• Data Security

• Security Operations

• Google Kubernetes Engine (GKE) Security

• Kubernetes Security

Following the Assessment, FFF received a tailored and prioritized report guiding them through how to elevate their posture across all domains to the risk tolerance desired by their business. The report is organized and prioritized based on risk impact, and delivery effort required to act on recommendations. RKON Consultants walked through the report and left no stone unturned in discussing relevant best practices and elevation opportunities, tailored to their business and environment.

In close partnership with FFF leadership and boots on the ground engineers, RKON continued to work with FFF following the assessment to support delivery of priority security objectives, including verifying least privilege permissions for users and applications across the environment. With the goal of assuring security best practices while enabling innovation, RKON focused on implementing Guardrails through the use of GCP Organization Policies.