Session guide: Get the most out of Next OnAir Security Week

With new threats, constantly evolving regulations, and the need to secure increasingly decentralized environments, keeping your organization safe and compliant keeps getting more complex. This year, COVID-19 has impacted all of us in multiple ways—including in how we think about and manage security. Google Cloud Next ‘20: OnAir has a range of sessions on ways we can help secure your organization in today’s new normal. If you haven’t registered yet, no problem. Just head to the Next OnAir website and you’re ready to go. Security week starts with our welcome session where you’ll get an overview of what’s to come. Then, be sure to check out our solution keynote, A Better, Safer Normal, where we’ll look at how you can operate securely and simply in this new security reality we’re facing. This year features over 20 security sessions—all going live at 9am PT on Tuesday, August 4—so there’s sure to be something for every security professional.  Data Protection and Customer ControlsThese sessions provide best practices and tips to help you ensure the confidentiality and privacy of your sensitive data. While they have a focus on encryption and key management options, we’ll also present options for data discovery, classification, and anonymization.Confidential Computing: The Next Frontier In Data Protection: Learn about Confidential Computing and how it’s enabling the shift to private, encrypted services where organizations can be confident that their data stays private and isn’t exposed to cloud providers or their own insiders. Cloud HSM Deep Dive and Best Practices: Cloud HSM has enjoyed fast growth since its 2018 debut. See what’s coming up next in this deep dive.The New World of Controlling Your Data in the Cloud: Cloud External Key Manager and Key Access Justifications: Need to retain tight control over access to your data? Learn more about these products and how they can help you solve your security and compliance challenges.Managing Sensitive Data in Hybrid Environments: Learn how Google Cloud Data Loss Prevention can help you manage data, focusing on support for inspection of content in hybrid environments.Threat Prevention, Detection, and ResponsePreventing threats—whether you’re operating in the cloud, on-prem, or in a hybrid model—is a huge part of almost any security practitioner’s job. Check out these sessions to improve your organization’s threat preparedness.Take Control of Security with Cloud Security Command Center: See how Cloud SCC can help you prevent, detect, and respond to threats in your Google Cloud environment.How You Can Protect Your Web Sites and Applications with Google Cloud Armor: Learn what the latest Cloud Armor announcements mean for you, complete with real-life examples and case studies.Protect Your Customers from Phishing, Malware, Fraud, and Hijacking with Google Cloud User Protection Suite Powered by Google Safe Browsing and reCAPTCHA: Keeping your users safe is job 1. This session shows how you can reduce online fraud with reCAPTCHA Enterprise and the Web Risk API.Scale-Up to Your Security Telemetry: Take an in-depth look at how to use Chronicle, our cloud-native security analytics system built on core Google infrastructure and fed by a massive threat database to be better prepared for threats.Identity & Access ManagementIdentity and access management is one of the key control points in the cloud. These sessions detail the ways you can make sure that the right users have access to the right resources to get their jobs done.Getting Started With BeyondCorp: A Deeper Look into IAP: Check out this session to understand why your company may need to adopt a new, zero-trust security model and how to get started.Using Policy Intelligence to Achieve Least Privilege Access: See how to improve visibility into who has access to what, quickly resolve access control issues, and discover best practices for putting tight controls around your cloud resources to increase security and reduce risk.Uber Presents: Minimizing Permissions Using IAM Recommender: Learn how Uber integrated IAM Recommender with their security hardening pipeline to tighten IAM policies, then look into best practices for improving your IAM without increasing your workload.Advanced IAM: Hacks, Tips, and Tricks for Policy Management: Take a deep-dive into access policy management in IAM, with advanced topics like avoiding policy change conflicts through concurrency control, policy attachment point discovery, client library usage, and more.Deep-Dive: Google Cloud’s Managed Microsoft AD and Applications: Get back on the board for another deep dive, this time into the Google Cloud Managed Service for Microsoft Active Directory.Authentication for Anthos Clusters: Dry off and take a walk through how to authenticate to Anthos clusters, including how to integrate with your identity providers using protocols such as OIDC and LDAP, then check out some hybrid-cloud scenarios to see how to leverage existing authentication tools with Anthos.CollaborationOur productivity and collaboration tools help teams work better together. These sessions will provide you with a blueprint on how G Suite secures your data, and the controls you have to do even more.Keep Hackers Out: A Use-case-led Approach to G Suite Security: Take a deep dive into the security use-cases that customers can solve with G Suite: What do I do if I detect a phishing incident? Looks like a device is compromised, how do I go about remediating? How can I find out who is sharing what outside the organization?No User Left Behind: Empowering Collaboration with Security: Enable seamless security to ensure that G Suite users can access data safely and securely while preserving individual trust and privacy. ComplianceSecurity and compliance are among the first topics that companies face when considering moving workloads to public clouds. These sessions provide the best practices and technology you need to help meet your compliance obligations.Master Security and Compliance in the Public Cloud: Discuss how customers and Google work together to be able to deploy workloads that must meet regulatory and compliance requirements.Building Trust Through Customer Collaboration: Learn how our Cloud Trust team engages with customers to ensure you can confidently adopt our products, whether through pooled audits, contractual commitments, or even a walk through of one of our global data centers.Security, Privacy, and Compliance Solutions for Healthcare: Take a detailed look at how Google Cloud can help healthcare organizations address the many challenges they’re facing and improve the security and governance of their systems while efficiently migrating to the cloud.Mission Possible: Moving Your Most Sensitive Data to GCP: With Assured Workloads, you can move your most sensitive data to Google Cloud while configuring data location controls, administrative access controls, and encryption parameters. Check out this session to learn how.When you’re done with your sessions, be sure to check out the Security Week recap, and keep visiting the blog for more security content.
Quelle: Google Cloud Platform

Google Cloud AI and Harvard Global Health Institute Collaborate on new COVID-19 forecasting model

The COVID-19 pandemic has had a tremendous impact on the world, from changing the way we live to driving extraordinary acts of human compassion. Nowhere have both the disruption and perseverance been more evident than among the front-line workers who continue to respond tirelessly.In partnership with the Harvard Global Health Institute, Google Cloud is releasing the COVID-19 Public Forecasts to serve as an additional resource for first responders in healthcare, the public sector, and other impacted organizations preparing for what lies ahead. These forecasts are available for free and provide a projection of COVID-19 cases, deaths, and other metrics over the next 14 days for US counties and states.The COVID-19 Public Forecasts are trained on public data such as those from Johns Hopkins University, Descartes Lab, and the United States Census Bureau and will continue to be updated with guidance from the Harvard Global Health Institute.“The COVID-19 Public Forecasts model produces forecasts at the critical jurisdiction of public health action—the county. Coupled with the work of the Harvard Global Health Institute’s county-level COVID-19 Suppression Metrics, the COVID-19 Public Forecast Model will allow for targeted testing and public health interventions on a county-by-county basis. By providing accurate, timely predictions of cases, infections, hospitalizations, and deaths to both policy makers and the general public, it will enhance our ability to understand and respond to the rapidly evolving COVID-19 pandemic,” said Dr. Thomas Tsai, surgeon and health policy researcher in the Department of Surgery at Brigham and Women’s Hospital and in the Department of Health Policy and Management at Harvard T.H. Chan School of Public Health.Alongside other data sources, the COVID-19 Public Forecasts can be a helpful resource for those at the front lines of responding to this pandemic who are seeking to better understand and prepare for the progression of COVID-19 in their region. For example, healthcare providers can incorporate the forecasted number of COVID-19 cases as one datapoint in resource planning for PPE, staffing, and scheduling. Similarly, state and county health departments can use the forecast of infections over the next two weeks to help inform their testing strategy and help identify areas at risk of new outbreaks.“As healthcare providers, the ability to ever more accurately predict the evolution of this pandemic is vital to our ability to prepare for, and manage, the COVID-19 crisis,” said Dr. Edmund Jackson, Chief Data Officer at HCA Healthcare. “Having Google bring their unique compute and AI prowess to better answering this question is enormously helpful. We are excited to be part of this work.”To generate the COVID-19 Public Forecasts, Google Cloud researchers developed a novel time series machine learning approach that combines AI with a robust epidemiological foundation. By design, this new model is trained on public data and leverages an architecture that allows researchers to dive into the different relationships that the model has learned to better interpret why it makes certain forecasts. We hope that these measures not only help the public understand how the model works, but can also enable further innovation in infectious disease modeling.The COVID-19 Public Forecasts are free to query in BigQuery or to download as CSVs (state forecast CSV and county forecast CSV). Additionally, they are available through our Data Studio dashboard and as part of the National Response Portal. We are also publishing a full explanation of the novel methodology and the datasets used in our White Paper and User Guide. As with any forecasts, the COVID-19 Public Forecasts have limitations that should be carefully considered before being used to inform decisions. In order to download or use the forecasts, users must agree to the Google Terms of Service.Google is committed to a core set of AI principles. In developing the COVID-19 Public Forecasts, we paid close attention to the disproportionate impact the disease has had and how that would impact our adherence to these principles, particularly principle #2: “Avoid creating or reinforcing unfair bias.” CDC research has shown that communities of color in the United States have been the hardest hit by COVID-19 with disproportionately high rates of cases and deaths. Our team has conducted a comprehensive fairness analysis to investigate how that disproportionate impact affects the accuracy of our forecasts and how they should be interpreted. We encourage all users who intend to make decisions in part based on the COVID-19 Public Forecasts to closely review the Fairness Analysis. Additionally, we call for an open dialog among public health officials and the AI community in how to address these inequities and measure how their impact may appear in various AI models.We are excited to focus Google Cloud’s commitment to innovation in AI to help those on the front lines of the COVID-19 response. Learn more about the COVID-19 Public Forecasts from our User Guide and White Paper, or get started with the data now in BigQuery, Data Studio dashboard, the National Response Portal, or via the CSV data (state, county).
Quelle: Google Cloud Platform

Getting to know Looker: How LookML can simplify BI workflows

Business intelligence workflows at any organization can help the business make better decisions, like where to expand your company and how to most effectively deploy your resources. My work as a data analyst, open data advocate, and former lead of the Google Cloud Public Datasets Program has given me a broad view into how data teams develop their business intelligence workflows. I’ve been fortunate to work with data analysis teams across numerous industries, including retail, weather, financial services, and more. Throughout this, I’ve seen the common challenges that teams run into in their business intelligence workflows.  You might think that teams’ challenges stem from the tool they pick, but every business intelligence tool has its own advantages. Some excel at data visualization, others are great for sharing dashboards, and some BI tools do well with data preparation. Most BI tools connect easily to at least some data warehouses, and have the ability to visualize these data. But every BI tool also has its drawbacks. And because every team across an enterprise has slightly different requirements for BI, they often choose different tools, creating a segmentation problem within a company. The most common form of this I’ve seen is that metrics are defined differently within each tool and there is no centralized data governance, which leads to unnecessarily duplicated workflows across the company. Looker, now part of Google Cloud, can help address these “in-between product” issues. LookML, Looker’s powerful semantic modeling layer, gives teams the ability to easily create a standardized data governance structure and empowers users across the enterprise to undertake their own analysis while trusting that they all are built on the same single source of truth. (You can read more about why Looker developed LookML in this blog post.) In this post, though, we’ll focus on five groups who can benefit from LookML and see how it can simplify their BI workflows. For each group, you’ll see how LookML can help, with a snippet of LookML code as an example. Click through to the “Here’s an example” link to GitHub repositories to see the full LookML file if you’d like more detail.Data engineers and modelersWho are you: You are the group that most obviously benefits from LookML. Your title is probably “business intelligence analyst” or “data engineer.” Your team builds the underlying infrastructure that makes data-driven decision-making possible, standardizes the data that feeds key metrics, and helps measure progress toward KPIs. How LookML helps: LookML is all about reusability. It brings to data modeling many of the tools and methodologies used in software development, such as collaborative development with Git integration, object definitions, and inheritance. It allows you to define a dimension or measure once and build on it, instead of having to repeat this effort. This enables you to standardize metrics and the data that define them across the entire enterprise in a scalable manner that saves you time. By converting raw data into meaningful metrics using LookML, you empower BI users across the entire enterprise, from accounting to marketing, to easily get started building their dashboards with the confidence that comes from knowing their metrics are properly defined and aggregated.Here’s an example: One common challenge for businesses is being able to compare profit and margin across different business units because of differences in revenue sources, inventory costs, personnel expenses, and other factors. This often leaves decision-makers siloed from each other and requires you to make manual adjustments any time you want to do cross-silo comparisons.However, LookML can eliminate that challenge. The LookML snippet below joins the item cost from the inventory_items table with the sale price from the order_items table, so that gross_margin can be defined as sales_price – inventory_items.cost. Once that’s in place, you can see how easily gross_margin is referenced repeatedly throughout other dimension definitions. You can call ${gross_margin} without having to either rewrite the SQL each time or rerun the same SQL statement in several different places.Why this matters: Centralizing the definition of a metric decreases the likelihood of introducing human error that can potentially break data pipelines, and reduces the demand on the SQL engine by not having to run the same SQL statement every time you want to reference gross margin. Most importantly, it ensures there’s a single, standard definition of gross margin across the business under the hood, hiding that complexity from downstream users.Data analystsWho are you: You are the people that companies rely on to verify that an analysis is accurate. Your title is something along the lines of “data analyst” or “business analyst,” and you know the intricacies of the data that lie behind these analyses. Your colleagues trust and rely on you to make sure they are interpreting the data correctly. How LookML helps: LookML empowers data professionals to empower others. It allows you to document your extensive knowledge of the data, pre-define common aggregations to prevent misuse, and provide your colleagues with a trusted layer of data definitions that allows them to focus on their individual analysis. LookML can reduce the number of chats, emails, and calls that you get, since it gives users a central repository of information about the data where they can get answers directly.  Here’s an example: Data analysts are regularly asked to develop a one-off analysis that can answer a question that either doesn’t come up very often, or needs to be answered in a certain way. This ends up consuming time that could be spent on higher-impact projects. LookML helps analysts expose key metrics, so users can do their own analysis without having to worry about whether they are calculated consistently. This means that everyone across the business gets a single source of truth for their data. Let’s look at an example from the healthcare industry. Customer health score has many various definitions. It’s easy for two individuals to define it differently, especially when various tools have different definitions that aren’t always clear about how they calculate it. However, LookML enables you to set this definition for business users so they can dig into the trends on their own using a reliable source. It also allows developers to add comments and descriptions to help users understand how a specific metric is calculated and what assumptions were made. These custom metrics descriptions propagate in Looker’s front end Explore environment as tool tips (see image below). Plus, Looker’s new Data Dictionary (available for free in the Looker Marketplace) hosts all of the descriptions and SQL definitions for each metric (see image below).Why this matters: LookML’s ability to help you communicate and collaborate with end users helps business users and decision-makers dig into the data further without having to reach out to a data analyst. Looker’s Explore capabilities empowers those users to dig into the relationships in your data on their own, knowing they can trust the underlying metrics and calculations. This means that you can spend less of your time in meetings, emails, and chats explaining the analysis and its underlying assumptions, and more time analyzing data for more impactful projects.IT securityWho are you: You make sure that those who are supposed to access data can, and those who aren’t supposed to cannot. Your title might be “IT specialist” or “Data security specialist.” You help companies comply with regulatory requirements such as HIPAA, GDPR, and CCPA, and protect customer privacy by ensuring that the company’s data isn’t exposed to those who don’t have a need for access. How LookML helps: LookML is built for today’s complex data. It allows you to provide access to those who need it and deny access to those who do not without having to create and manage separate dimensions, dashboards, or instances of Looker. LookML’s implementation of the open-source template language Liquid lets you tap into Looker’s user permissions to programmatically determine a user’s access level. This means you can dynamically restrict a user’s access to view a dimension or measure based on the user’s access permissions, managed directly in LookML. These controls enable you to set row-based access filters and column hiding that is determined based on user attributes and groups within Looker and data masking, which is demonstrated in the image below. This means that data analysts only have to maintain one dashboard, instead of several, while security professionals like you can have all the tools you need to manage permissions.Here’s an example: Currently, security teams have to manage user permissions across multiple data warehouses, each of which has their own permissions and definitions. Not only is this cumbersome, but it adds an unnecessary layer of complication to try to get the right permissions from each individual product that you need to provide only the right data to users.LookML support for Liquid SQL helps simplify this entire process. It directly connects to Looker’s user permissions, where you can set attributes and roles for each individual user. This example looks at a retail banking use case, where an individual may need to see a customer’s full credit card number. Instead of having to manage column-level permissions across multiple warehouses, LookML’s Liquid SQL enables Looker to dynamically determine if a user should have access to a given column based on their user attributes.Why this matters: Managing all user access permissions in a single place saves you time and effort while reducing the risk of a mistake leading to inappropriate data access. LookML’s Liquid templating means you can manage permissions right alongside the metric definition, so you know exactly what you are allowing appropriate users to access. Plus, you no longer need to determine which permissions need to be given in which data warehouse using what syntax.Executive/CXOWho are you: Your job is to make sure that the enterprise as a whole can use data to be more effective. Your title could be “chief data officer” or “SVP of analytics.” Your job is to ensure the company runs as smoothly as possible. This means making sure that metrics are measured and reported uniformly across the business. How LookML helps: Data warehousing technology and needs have evolved over the years. These repeated paradigm shifts have left many enterprises with data stored in different places, different structures, and with different definitions of key performance indicators. This can sometimes make it hard or impossible to compare performance between different business units. LookML lets you standardize these definitions across the business, so you can more easily analyze the success of the business. This means less duplication of work and more streamlined metrics.Here’s an example: You are constantly running between meetings, and don’t always have time to dig into the data as deeply as you might prefer. This means you have to trust that the answers provided for you are comparable between different business units, so you can prioritize resources and allocate budget as effectively as possible. Let’s look at how LookML can simplify life for software as a service (Saas) companies by calculating dollar-based net retention instead of requiring you to manipulate data in a spreadsheet and slice data in different ways. The importance of this metric, often presented at board meetings and during investor meetings, means there is incredible pressure to make sure it is accurate—every time. LookML allows you to define the metric once and never have to worry about it again, eliminating redundant effort between your teams. Plus, Looker can send you the results of the analysis on a scheduled basis in the format you need, whether it’s an emailed PDF for a quick review or a Google Sheet where you can dig in deeper or automatically update your slide deck for your next presentation.Why this matters: All of this automation saves you time and hassle, making it easier for you to stay on top of your business. You never have to worry about data freshness, no matter where you are reviewing the data. More importantly, it means that your teams no longer have to duplicate the same work across the entire business. This saves you time and ensures that you are receiving the most streamlined, consistent updates. Operations Who are you: Your job is to oversee the day-to-day operations of the business. Your title might be “operations manager” or “customer support director.” You care about understanding the high-level trends, but need to be able to dive down into the details of the data at a moment’s notice.How LookML helps: LookML is built for today’s complex data. The business segments you oversee are complex, and the data they produce reflects that. While high-level trends are valuable, a single abstraction or aggregation of the data will never fully communicate the intricacies you need to know to succeed. LookML’s ability to define how you want to drill down into your data gives you access to the details you need and can help you take action from the dashboard. When combined with Looker’s architecture, it gives access to the full, row-level data, not just extracts. You get all the tools you need to understand anomalies and important trends in your data.Here’s an example: You need to know the in-depth details about every part of the business you oversee, but can’t spend all day meeting with your teams to get them. While a dashboard with aggregated trends helps you know where to focus your energy, it’ll never be enough detail for you to take meaningful action to correct any potential problems and communicate with your teams or customers. The images below demonstrate how LookML can be used to help a retail operations or customer support team lead. The first two show how LookML can be used to define drill_fields on a dashboard. This allows a user to click on an aggregated metric, such as number of orders, to see a table with the specified fields of each data row that makes up the aggregation. You can also drill down to a separate dashboard that has more detail for a given metric.The final image shows how an action can be defined in LookML as well. This makes Looker’s drill-down capabilities even more powerful. An action can be defined on a given field to allow you to take action while examining the data without having to leave Looker. In this case, the action defined can send a promotional email to a customer when the data viewer clicks on the user’s email address. You can define any number of actions as appropriate for your data.Why this matters: These capabilities let you see exactly the information you need, find more detail when you need it, and take action immediately. This removes dependencies on others and frees up your team’s time and energy to focus on the most important projects. It also lets you engage and take action directly from the insights you uncover in your data, allowing you to operate more efficiently.If you’re interested in learning more about how LookML can support your BI workflows, check out the LookML documentation or join our deep-dive Looker session during Google Cloud Next ‘20: OnAir. If you’re ready to get started taking advantage of LookML’s unique capabilities, sign up for a free trial.
Quelle: Google Cloud Platform