Google bets big on zero-trust security

At a time when cyberattacks are rising due to the Covid-19 pandemic and organisations are becoming increasingly vulnerable as employees work from home, technology giant Google is betting big on its zerotrust turnkey security offering Beyondcorp Enterprise for businesses in India.

Beyondcorp is modelled after how Google keeps its network safe without relying on virtual private network (VPN). The platform allows employees and extended workforce to access applications in the Cloud or on-premises and work from anywhere without a traditional remote-access VPN.

“Our approach to creating a safer normal is predicated on the fact that cyberattacks are going to accelerate. People cannot do this patchwork of security solutions that they’ve had for the past two decades. A zero-trust operating system like Beyondcorp allows you to make your safety posture better,” said Sunil Potti, vicepresident and general manager of Google Cloud Security.

Google competes with global rivals, such as Amazon Web Services, Microsoft, and Alibaba, to dominate Cloud computing services. In India, Google is eyeing areas such as banking, financial services and insurance, manufacturing, health care, public sector, media and entertainment, telecommunications, and retail.

“This (Beyondcorp) has changed the game, in terms of how India can serve the world, in addition to India protecting itself,” said Potti. He said the distributed global workforce construct was limited by speed and security. One had to move applications closer (to the market) like having a Cloud region. But one couldn’t solve security in a foundational way, which made the global workforce less productive. For instance, a call centre provider will have access to one or two applications (apps) and for using other apps, it will require workflow changes.

“In a world of zero-trust, productivity gains are 10-100x. It’s a question of policy change,” said Potti. Beyondcorp enables organisations to have a flexible workforce that can be located anywhere. “I think zero-trust operating systems will actually unleash a new era of global productivity and countries like India have a good chance to benefit from it.”

To move the core aspects of various industries, including financial services and insurance to a particular market, there were concerns related to intellectual property and trade secrets. Many industries with sensitive data had to be centralised at the expense of productivity. With the new approach of zero-trust security, Potti said India can become a productivity hub and Google will play a key role to enable that with its Beyondcorp platform.

Zero-trust is founded on the concept that no device or user, whether outside or inside a network, can be trusted. It’s a preventative method useful for controlling access to data, networks, and applications.

Google started developing Beyondcorp in 2010. Before that, it had fallen victim to Operation Aurora in 2009, along with other companies.

Operation Aurora was a series of cyberattacks from China that targeted US private sector companies.

Many years later, when Covid-19 struck, 100,000-plus Google employees working in different offices globally were able to move quickly and safely to a work-from-home model. But there was no change in performance and functionality.

“We actually improved our productivity. We didn’t have to run between meetings,” said Potti, adding, “At Google, whether we are at work, home or Starbucks, it is all the same from a Beyondcorp perspective.”