Security Command Center updates and deprecations
Google Cloud's Security Command Center has updated several compliance frameworks, including CIS Controls and ISO 27001. The Security Command Center Enterprise tier is being deprecated and will be shut down on May 21, 2027, with organizations automatically migrating to the Premium tier. New features, Artifact Guard and Risk Engine for Cloud Build, are now available in preview.
Deprecations (1) ›
- Security Command Center
The Security Command Center Enterprise service tier is deprecated. It will be shut down on May 21, 2027. By default, your organization will automatically move to the Premium service tier on that date.
Features (2) ›
- Security Command Center
Artifact guard is available in Preview to the Security Command Center Enterprise and Premium tiers. Artifact guard is a service that helps you prevent the deployment of vulnerable packages throughout the software development lifecycle.
- Security Command Center
Risk Engine detects toxic combinations that are related to Cloud Build resources.
Enhancements (1) ›
- Security Command Center
The following Compliance Manager frameworks were updated: CIS Critical Security Controls v8 (version 8.0) CIS GCP Foundations Benchmark v3.0 (version 7.0) CSA Cloud Controls Matrix v4.0.11 (version 7.0) ISO 27001:2022 (version 9.0) NIST 800-53 Revision 5 (version 9.0) NIST Cybersecurity Framework 1.1 (version 8.0) PCI DSS v4.0.1 (version 6.0) Qatar National Information Assurance Standard v2.1 (version 6.0) SOC 2017 (version 7.0)
https://docs.cloud.google.com/release-notes#May_21_2026
