Tuesday, October 28th, 2025

🎯 Learning Intention

I will summarize how Google Cloud secures data through encryption, IAM, and compliance frameworks, and apply those concepts in a certification-style review.

✅ Success Criteria

I can describe IAM roles and least-privilege access.
I can explain encryption at rest and in transit.
I can match a cloud control to its purpose (identity, network, compliance).

☀️ Warm-Up (5 min)

“When you log into Gmail, how does Google know it’s really you?”

🧠 Mini-Lesson

Topic: Cloud Security Layers

IAM (Identity & Access Management): roles, policies, least privilege.
Encryption: AES-256 at rest, TLS 1.3 in transit.
Compliance: ISO 27001, SOC 2, FedRAMP — prove trust.
Security Operations: monitoring, alerts, audit logs.

📘 Detailed Notes

Security Layer	Purpose	Example
IAM	Control who can access what	Viewer / Editor / Owner roles
Encryption	Protect data in storage & movement	Drive file encryption
Compliance	Meet legal & industry standards	HIPAA for healthcare data
Monitoring	Detect threats in real time	Cloud Logging / Security Command Center

🕹️ Review Activity (30 min)

Cloud Kahoot / Quizizz Challenge – “Foundations Finale”

Questions cover:

Service models