GCP - Terms of Service

1. Overview

The Office of the CIO is sponsoring an initiative to deliver public cloud computing services to UW-Madison faculty, staff, and departments. The offerings focus on Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) including Google Cloud Platform (GCP).

2. Data elements allowed in GCP

UW-Madison has classified its institutional data assets into risk based categories for determining who is allowed to access institutional data and what security precautions must be taken to protect it against unauthorized access and use. The four classifications are Restricted, Sensitive, Internal, and Public. Additional details on these definitions can be found on the Data at UW-Madison website: https://data.wisc.edu. Restricted and Sensitive data elements are not allowed in GCP without an assessment by the Office of Cybersecurity, while Internal and Public elements are allowed in GCP. For information on the data elements permitted in GCP, please visit the Public Cloud knowledge base at https://kb.wisc.edu/public-cloud/search.php?q=elements.

3. Rates

Current rate information for Google Cloud Platform can be found in the Public Cloud knowledge base at https://kb.wisc.edu/public-cloud/search.php?q=rates.

4. Roles and Responsibilities

a. UW-Madison Public Cloud Team

i. UW-Madison Public Cloud Team is responsible for onboarding customers and initial GCP project setup, including high-risk project guardrails.

ii. UW-Madison Public Cloud Team is responsible for billing customers for Project usage

b. Customer

i. Customer is responsible for everything contained within GCP (guest operating systems, applications, data, backup of data, security, etc.)

ii. Customer is responsible for resource adherence to the to UW-Madison IT Policy documented at https://policy.wisc.edu/?f%5Bcategory_ssim%5D%5B%5D=Information+Technology&q=&search_field=all_fields including UW-526 Endpoint Management and Security: https://policy.wisc.edu/library/UW-526

iii. Customer is responsible for maintaining the list of users authorized to access an GCP Project

iv. Customer is responsible for adherence to the GCP Terms of Service

v. Customer is responsible for the Continuity of Operations Planning (COOP) plan for their GCP workloads

vi. Customer is responsible for all charges associated with their GCP project

vii. Customer is responsible for ensuring that any grant funds used to pay for GCP is done in accordance with RSP (https://rsp.wisc.edu) policy and federal requirements (2 CFR 200 Subpart E)

Additional details on roles and responsibilities in GCP can be found in the Public Cloud knowledge base at https://kb.wisc.edu/public-cloud/.

5. Support

All GCP projects are currently enrolled in Standard Support. Additional details on GCP support can be found in the Public Cloud knowledge base at https://kb.wisc.edu/public-cloud/search.php?q=support.

6. Additional Terms of Service

Departmental IT Security Baseline

GCP - Terms of Service

GCP - Terms of Service