Empowering teams with real-time insights to quickly address security findings and vulnerabilities
Proactively preventing misconfigurations and over-privileged accounts, reducing human error exposure
Embedding security checks directly into the CI/CD pipeline for "secure-by-design" products
Gaining immediate, dashboard-driven insights into adherence with global compliance standards and regulations
For nearly 150 years, Ericsson has been a global pioneer in communication technologies, shaping the mobile landscape and powering around half of the world's 5G live network traffic (outside China). As a company entrusted with critical infrastructure and vast amounts of sensitive data, security and trust are paramount to Ericsson's business and reputation.
For nearly 150 years, Ericsson has been a global pioneer in communication technologies, shaping the mobile landscape and powering around half of the world's 5G live network traffic (outside China). As a company entrusted with critical infrastructure and vast amounts of sensitive data, security and trust are paramount to Ericsson's business and reputation.
Eliminating undetected human error in cloud security
As Ericsson innovates and expands its footprint in public cloud with Ericsson On-Demand, particularly with emerging communication technologies, robust and consistent security in its Google Cloud environment is critical. The company saw an opportunity to leverage the investment and the security capabilities native to its Google Cloud environment faced, from IAM configurations to network policies and consistent posture management. Vaishali Someshwar, Head of Security for Ericsson On-Demand, pinpointed a core concern: "It's going to be a human error that goes undetected. Intentional or unintentional. So a resource that has too much privileges, hasn't been configured right, a network policy that might have allowed ingress traffic from the internet a little bit too much." This highlighted a pressing need for heightened visibility and a proactive approach to prevent misconfigurations and accidental exposures, aiming to empower teams beyond just security professionals to secure their own workloads from the start.
With Security Command Center, we've fundamentally shifted our security posture. It's no longer just for security teams; it empowers our developers and operations teams with intuitive, real-time visibility into vulnerabilities and misconfigurations. It's like having an alarm system for every window in your house — you know instantly if something's off, and you can fix it before it becomes a problem.
Vaishali Someshwar
Head of Security, Ericsson On-Demand
Democratizing security with real-time vulnerability visibility
Ericsson partnered with Google Cloud, adopting Security Command Center (SCC) as a foundational element of its Ericsson On-Demand security strategy. While a customer may still want to opt in for telecom specific security solutions to protect against telecom specific threats and frauds, SCC's native integration with Google Cloud provides immediate, intuitive visibility into runtime security posture. "With Security Command Center, we've fundamentally shifted our Ericsson On-Demand security posture," explains Someshwar. "It empowers our developers and operations teams with intuitive, real-time visibility into vulnerabilities and misconfigurations. It's like having an alarm system for every window in your house — you know instantly if something's off, and you can fix it before it becomes a problem." This approach democratizes security, enabling teams to utilize Google Cloud's native capabilities for a "secure by design and by default" approach. Ericsson also recognizes the complementary power of Google SecOps for advanced threat detection and automated workflows, with Someshwar noting, "The synergy between Google SecOps and Security Command Center is game-changing. SCC shows us the current state of our security posture, but SecOps is where the action happens."
The synergy between Google SecOps and Security Command Center is game-changing. SCC shows us the current state of our security posture, but SecOps is where the action happens. It's the 'alarm triggered' moment, where we can investigate, respond, and automate remediation workflows in real-time. Together, they provide the comprehensive, actionable intelligence we need to truly protect our customer data.
Vaishali Someshwar
Head of Security, Ericsson On-Demand
SCC visibility removes risk from human error
The adoption of Security Command Center has profoundly impacted Ericsson On-Demand cloud security, fostering a more empowered and proactive model. SCC provides real-time visibility into the security state of Ericsson's Google Cloud resources. Someshwar emphasizes, "It is clear to our dev and ops teams where the vulnerabilities are, what risks and threats exist and how to mitigate them. This is very useful to teams." This direct, actionable insight transforms how security is managed, moving it beyond a specialized domain. "Knowledge is power," says Someshwar. "SCC transforms the abstract concept of risk into a clear call to action for our teams." The ability to gain immediate compliance insights against standards like ISO, NIST, GDPR, and HIPAA further streamlines operations.
"What keeps me up at night is the potential for human error going undetected," shares Someshwar. "With Google Cloud Security, our vision for Ericsson On-Demand is to democratize security. This proactive approach ensures our workloads are secured right from design." Ultimately, "Google Cloud Security is an extension of our own security team," enabling Ericsson to build emerging communication technologies with a robust, secure-by-default, and secure-by-design foundation, reinforcing its global leadership.
Knowledge is power. Security Command Center provides immediate, intuitive insights into our Ericsson On-Demand runtime environment's security posture, showing us exactly where our vulnerabilities are, what threats exist, and how to mitigate them. It transforms the abstract concept of risk into a clear call to action for our teams.
Vaishali Someshwar
Head of Security, Ericsson On-Demand
The future of secure innovation
With Google Cloud, Ericsson is building the new way to get emerging communication technologies onto public cloud securely by default and by design. This ongoing partnership exemplifies a shared commitment to innovation powered by inherent security, ensuring that Ericsson continues to deliver cutting-edge communication solutions while maintaining the highest levels of trust and data protection for its global customer base.
Ericsson's high-performing, programmable networks provide connectivity for billions of people every day. For nearly 150 years, it has been a pioneer in creating technology for communication. It offers mobile communication and connectivity solutions for service providers and enterprises.
Industry: Telecommunications
Location: Sweden
Products: Security Command Center, SecOps