[GER]I'm posting some information here on the blog that I received from Google in mid-May 2025. Google Cloud has announced that it is expanding its Risk Protection Program (RPP) to over 30 EMEA markets (including DACH). The program is about cyber insurance, where two new partners Chubb (headquartered in Zurich) and Beazley have been acquired.
Advertising
Google Cloud is an offering by Google that provides AI, infrastructure, developer, data, security and collaboration tools for customers. According to the announcement, Google Cloud delivers a powerful, fully integrated and optimized AI stack with its own global infrastructure, custom chips, generative AI models and development platform, and AI-powered applications. As a "trusted technology partner", Google wants to support companies in their transformation to the cloud.
Cyber risks and insurance
Enterprises are increasingly exposed to cyber threats. Industries such as retail have been and continue to be subject to a wave of ransomware attacks, which is currently putting pressure on cyber insurance premiums. After a period of falling prices, brokers are now warning of double-digit premium increases and increased underwriting – in sectors ranging from retail to healthcare to transportation, writes Google.
In my German article WWK Versicherungen vom Cyberangriff betroffen, Attacken bald nicht mehr versicherbar; I had already picked up on a statement by Züricher (insurance) that cyber insurance would soon be difficult to order. The situation has become even more critical in 2025.
Germany is failing to implement the EU NIS 2 Directive in time, and companies are struggling with cyber security measures. In view of the increase in damage caused by cyber attacks, the insurance industry is expecting to see increased scrutiny of cyber security measures in the future.
Das Risk Protection Program (RPP)
This is precisely where the Google Risk Protection Program comes in, supporting customers with automated, more efficient processes. The program is currently open to Google Cloud customers with an annual turnover of over 500 million US dollars.
Advertising
According to the announcement, Google Cloud's Risk Protection Program (RPP) combines cloud security data with the expertise of leading insurers to provide tailored and competitive cyber insurance for Google Cloud customers. This includes coverage for emerging risks around AI and future threats such as quantum-based attacks.
Through Google Cloud's Cyber Insurance Hub, customers will be able to generate real-time reports on their security posture – and share them directly with insurers to enable smarter, faster and smoother risk assessments. This is a first step towards a "telematics model for cyber risk", where actual security data is used for pricing instead of static assessments, writes Google Cloud.
The founding partner in the program is Munich Re, which is expanding its cooperation by integrating Munich Re Specialty and HSB. Chubb (headquartered in Zurich) and Beazley join as new partners. Together, these leading insurers aim to offer tailored, accessible and risk-oriented policies for Google Cloud customers worldwide.
For digital-native Google Cloud customers, the acquisition process is further simplified, according to the press release: Beazley offers qualified companies the opportunity to forego a traditional insurance application route and instead enter via a one-page attestation.
In addition, clients insured by Munich Re receive exclusive access to Mandiant services – including threat analysis, consulting and crisis preparation. These include real-time updates on vulnerabilities, technical support for security incidents and tabletop exercises to improve incident response.
Another highlight is the new Affirmative AI coverage. This extends Google's existing AI indemnification to include insurance cover for generative AI workloads. Chubb also goes one step further and offers proactive protection against potential future risks from quantum-based attacks.
Monica Shokrai, Head of Business Risk and Insurance, Google Cloud, believes that the cyber insurance market is still maturing – especially when it comes to assessing risks using relevant metrics. Many CISOs find the insurance process frustrating, as the questions asked do not reflect the actual security status – even though insurers are constantly working on improvements. At the same time, there is great uncertainty as to whether risks can be priced appropriately, which can lead to market distortions and premium increases after major incidents.
With the expanded version of the Google Cloud Risk Protection Program, the Google people are working closely with insurers to change that. By combining real-time security data from the cloud with the expertise of the insurance industry, they hope to improve risk transparency to enable smarter underwriting. The aim is to ultimately provide broader and more affordable protection for customers.
Google is committed to the program to help customers build a stronger security posture. The shared fate approach involves working with customers to reduce risk. The Risk Protection Program rewards this commitment with competitive policies that respond to an improved security posture. For companies, this is an opportunity to use the insurance process as a catalyst for better security standards – and to be recognized for it at the same time. Google Cloud has published a blog post of this announcement.
Advertising
