This Google Cloud Platform security best practice is part of the Incident Response Management security domain.
Incident-related data shall be collected and report metrics shall be reported.
All incidents for root cause to generate recommendations for improvement for consideration by Client shall be analysed.
Procedures shall exist to track and document information system security incidents and related solutions in accordance with incident management work instructions.
Customer-initiated incident response include a Gold or Platinum contract that entitles the customer to 24/7 support with under-an-hour SLA and phone support. If customer staff is in multiple time zones, it is beneficial to give details about when each should be contacted.
Customers should monitor the relevant email address (the project owner email address) regularly so that you know as soon as your project is warned.