What GCP Policy Analyzer is
Basic built in analysis for GCP policies and users. Also provides role recommendations. At a high level, GCP is the easiest of cloud providers to manage permissions in. The vendor site is cloud.google.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What GCP Policy Analyzer covers
GCP Policy Analyzer is in the catalog for these capabilities. Categories: Identity. Catalog tags: Included, Best for MidMarket, and Best for Startups.
How to evaluate GCP Policy Analyzer in a security program
Use GCP Policy Analyzer as a stack candidate, not as diligence evidence. The oneNorma score for GCP Policy Analyzer is 4/10 (percentile 15). If the real gap is in Identity, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what cloud.google.com publishes. Contrast it with pentesting and Security Cloud & Compliance.