Explore security controls and infrastructure management in this 39-minute conference talk from fwd:cloudsec featuring David Challoner, Technical Lead for Google's Regulated Cloud team. Gain insights into Google's internal cloud system (Borg) and learn how its security mechanisms compare to Google Cloud Platform (GCP) workloads. Discover practical approaches for implementing robust compliance and data access controls, drawing from examples applicable to both GCP and private infrastructure deployments. Learn from Challoner's expertise in building and operating systems that enable critical Google Cloud features like Assured Workloads and Access Transparency, while understanding how to effectively bridge the gap between internal and external cloud security implementations.