In a statement on Thursday, the ACSC said the Platform joined 12 existing providers that met government standards for managing data storage at the minimum government security standard known as "Unclassified".
Government agencies can obtain the certification report from Google to understand the residual risks, non-compliance with the Information Security Manual, mitigations and guidance in the event that they wish to use the Cloud platform.
Certification for the Certified Cloud Providers List is based on principles and policies laid out in the country's Protective Security Policy Framework and the ISM.
The ACSC Certified Cloud Services List. Courtesy ACSC
ACSC chief Alastair MacGibbon said: "Google sought entry into the certification program for hosting data classified up to Unclassified DLM. Because of this Google was only assessed for this purpose.
"If an agency’s security and risk needs can be met with a cloud certified to Unclassified DLM, this increases their choices in meeting their business objectives."
This means that the Platform and a physical data centre in Sydney is certified to provide 16 services, in categories that include:
- Compute (Compute Engine, App Engine and Kubernetes Engine);
- Storage (Cloud Storage and Persistent Disk);
- Networking (Virtual Private Cloud, Cloud Load Balancing and Cloud DNS);
- Security (Cloud Key Management Service and Cloud IAM);
- Management (Stackdriver);
- Data Analytics (Cloud Dataflow, Cloud Dataproc and Cloud Datalab); and
- Databases (Cloud SQL and Cloud Datastore).