{"id":"FR1805751477","name":"Google Services (Google Cloud Platform Products and underlying Infrastructure)","provider":"Google","providerSlug":"google","status":"FedRAMP Authorized","impact":"High","authType":"JAB","authDate":"2019-12-04","serviceModel":["IaaS","PaaS","SaaS"],"deployment":"Public Cloud","businessFunctions":["Analytics","Cybersecurity & Risk Management","Data Management","Development Tools","Fleet Management","Network Management","Operations Management","Storage","System Administration","Virtual Private Network (VPN)"],"assessor":"Coalfire Systems, Inc.","assessorId":"138514","smallBusiness":false,"website":"https://cloud.google.com/","description":"The Google Services offering consists of two primary layers: Google Cloud Platform (GCP) and Google Common Infrastructure (GCI). The Google Cloud Platform is made up of customer facing services. The services within the Google Cloud Platform sit on top of Google Common Infrastructure, which is infrastructure private to Google that is responsible for the implementation of common controls for all Google service offerings. These two pieces work together to provide the Google Services offering.\n\nGCP is an extensive suite of products from Google-controlled development environments to customer-managed environments (e.g. Google Compute Engine) offering flexibility via fully customizable virtual machines and utilization of other services like: fully-managed databases and data analytics tools, networking services including virtual load balancing and virtual private cloud solutions, access management tools, Cloud project management tools, machine learning capabilities, and developer tools.\n\nAssured Workloads is a GCP feature which turns on specific project configurations per the target compliance regime for customers. Products discretely integrate with Assured Workloads and enforce the organization policies themselves.\n\n** The entire authorized security boundary of Google Services is documented, assessed, and managed against the FedRAMP High baseline of security and privacy controls. Services that are denoted with an asterisk (*) do not meet the SA-9(5) requirement. Please review the JAB P-ATO letter for more information.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Google%20Logo.png","inMarketplace":true,"agencies":["22-034","22-011-03","22-011-01","22-011-05","22-016-01","22-022","22-007","22-007-25","22-007-28","22-005","22-005-04","22-005-06","22-005-01","22-005-11","22-002","22-002-02","22-002-08","22-002-04","22-042","22-027-01","22-036","22-070","22-019","22-030","22-074","22-062"],"reuseCount":28,"leverages":[],"leveragedBy":["FR2425960757","FR2214062312","FR2431264500","FR2412062433","FR1814168113","FR2226322745","FR1918442180","FR2424553196","FR2504148525","F1212191840A","FR2000939520","FR2125059322","F1605107897","FR2014656304","FR2000863987A","FR1706403967","FR2234550858","FR2325657620","FR2200507410","F1206111371","FR1807853629A","FR2100845343","FR2414718666","FR1814557199","FR2410060106","FR2004446306","FR2510664395","FR1932554201","FR1834348080","FR1918150046","F1206081364","FR2031155471","FR2212912561","FR1927682057","FR2226144516","FR1910758409","FR2234963115","FR2119265538","FR2105946715","FR1913470600","F1606097904A","FR1722838693","FR2309954376","FR2204842850","FR2234256499","FR2214346691","FR2033152148","FR2035740126","FR1722532017","FR2130949241","FR2134635186","FR1901136437","FR2213647361","FR2215045786","FR2009746321","F1605037894","FR2433985791","FR1825232355A","FR2103344623","FR1726564822","FR1821856903","FR1720454205"],"timeline":[{"date":"2019-02-05","to":"JAB Review","certType":"Rev5"},{"date":"2019-12-04","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Coalfire Systems, Inc."},"sponsor":"22-011-03","trustCenterCheck":null}