INSTRUCTIONS - DO NOT PRESENT Generic: A new breed of worker has emerged – cloud worker – requiring next generation, cloud-based tools Level 1 - top-line summary of the primary benefits of Chrome Enterprise for a business, and for its Cloud Workers. (Use for EBCs, first conversations, CXO level) Level 2 - double-click on individual feature to access suppoing slide(s) (ITDMs) Level 3 - granular, product-specific detail (System Admins) Level 4 - Use cases descriptions for Frontline Workers, Information Workers and Developers. This is a modular pitch deck, designed to enable you to build your own presentations by pulling in the relevant content for your use case.
140
Embed
This is a modular pitch deck, designed to enable you to build€¦ · Partner Pitch Deck Website Vision Cloud Worker Frontline thought Messaging leadership Journey to a Cloud Workforce
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
INSTRUCTIONS - DO NOT PRESENT
Generic: A new breed of worker has emerged – cloud worker – requiring next generation, cloud-based tools
Level 1 - top-line summary of the primary benefits of Chrome Enterprise for a business, and for its Cloud Workers. (Use for EBCs, first conversations, CXO level)
Level 2 - double-click on individual feature to access supporting slide(s) (ITDMs)
Welcome to the Chrome Enterprise Partner Content Map
Click on the blue-highlighted text in the boxes below for links to partner marketing resources. Access all of the content listed below in our Shared Partner Drive.
NOTE: For any questions or feedback, please reach out to the Chrome Enterprise partner marketing team using our email alias
Partner Pitch Deck Website
VisionCloud Worker Frontline thought leadershipJourney to a Cloud Workforce
Partner Content Map: CE Partner Marketing Resources
INSTRUCTIONS - DO NOT PRESENT
Welcome to the Chrome Enterprise Partner Content Map
Click on the blue-highlighted text in the boxes below for links to partner marketing resources. Access all of the content listed below in our Shared Partner Drive.
NOTE: For any questions or feedback, please reach out to the Chrome Enterprise partner marketing team using our email alias
Chrome Enterprise Deployment Guide
TCO Calculator
ESG ESG ‘Day in the Life’ Chrome Browser ESG ‘Day in the Life’ Employee Onboarding ESG ‘Day in the Life’ Grab and GoESG ‘Day in the Life” Remote Access
Next 2019Chrome Enterprise Approach to Endpoint Security Managing Chromebooks and Apps with CE Changing End User ComputingTurn Your Frontline Workers into Cloud WorkersWhat’s New in Chrome Browser
Help CenterChrome Enterprise Help CenterChrome Enterprise Release NotesChrome Browser Deployment Guide
DemosYoutube “How-To” Demo Videos Titan C Security Chip Demo
Chromeboxes & Chromebases to power desktop workstations
*Chromebox Enterprise and Chromebase Enterprise also available
Secureby design
Enterprise capabilities
Smart investment
Easy access to apps
A smart way to work
Versatile devices
For your cloud workforce For your business
Multi-layered device security
Deter negligent behavior
Contain attacks to a limited surface
Update device fleet seamlessly
PhishingCommon attack
● Google Safe Browsing
● 2SV & Security Keys
● If Attack Prevails: Password Alert Policy
RansomwareCommon attack
● Low on-device data footprint
● Read-only; can’t modify OS
● If Attack Prevails: Verified Boot
Malicious applications
Common attack
● Per-permission based blacklisting
● Managed Google Play
● If Attack Prevails: Sandboxing
Why Chromebooks don’t require Antivirus
● Read-only; installed apps and extensions can’t modify OS
● Sandboxing isolates any attack to a limited surface
● Verified Boot prevents boot-up of tampered device
● Review process required for all extensions and apps
Why Chromebook updates are so effective
● No downtime; updates happen in the background while users work
● Two versions of OS on device means one can be used while the other gets updated
● Update applies on reboot, taking mere seconds to complete
Ensure the OS and encryption keys haven’t been compromised and enforce policies remotely.
Protect from logins on remote devices, brute force attacks, and phishing scams.
Hardware-backed protection powered by the Titan C security chip
Designed and updated by Google so you’re always protected from the most recent threats.
Isolated and managed apps
Sandboxing limits attack surface
Enforce access policies
Secure multiple ecosystems
Google Admin console
VMware Workspace ONE
Citrix Endpoint Management
Cisco Meraki
IBM MaaS360
Group Policy Objects
Simplified orchestration with panel of your choice
Flexible Access regardless of identity or use case
Google Cloud Identity
SAML SSO providers
Microsoft Active Directory
Work use
Shared devices
Managed guest sessions
Kiosk mode
Find the device you’re looking for with filtering
Google Admin console
Android apps, extensions and PWAs all under one roof
Google Admin console
Hundreds of user and device policies are now easily searchable
Google Admin console
An OS with built-in enterprise capabilities, managed with your prefered solution
Chrome device management
VMware Workspace One
Citrix Endpoint Management
UEMs
Extensions blacklisting
Allow or block URLs
Managed Google Play
Linux container enforcement
Device & User policies
Client certificate management
Printer management
Network management
Device reporting
● OS version pinning● Remote supportability● OS update scheduling
OS Updates + Supportability
● Native Active Directory● Advanced SAML SSO● Identity-free● Login restrictions
Identity
● Lost or stolen protection● Ephemeral Mode● Application verified
access● Forced re-enrollment
Security● Kiosk mode● Managed guest sessions
Advanced modes
Group Policy w/ AD
24/7 support for IT
Google Cloud Support is here to help
A smart investment for the business
Reduced employee downtime from background updates
Security breach cost avoidance
Reduced hardware and licensing costs
Hardware savings
Lowered IT overhead
Employee efficiency
Risk mitigation
*ESG, 2018: Quantifying the value of Chromebooks with Chrome Enterprise2018 Chrome OS Forrester TEI reports
$482 /device
Source: Windows Insider
Deployment time savings at Google
Source: Google Corporate Engineering team
Source: Windows Insider
Reducing the support burden for IT
Source: Google Corporate Engineering team
Cloud-ready use cases for Chrome Enterprise
Front of house Improve customer engagements
2
Field / mobile Access to information on the go or in distributed locations
1
Grab and Go with Chrome Enterprise (temporary users)Shared devices for temporary users or customers
4
Cloud-ready information workersMore secure, cost-effective, easier-to-manage replacement for legacy devices
5
Back of house Digitize back-office processes for workers
3
Here are six areas where customers can achieve success with Chrome Enterprise
6 Android and web developersSecure access to familiar, robust software for building great apps
Level 3Granular product information 3
SECTION DIVIDER - DO NOT PRESENT
Proprietary + Confidential
Selecting the right Chromebook for your cloud workers
Proprietary + Confidential
Three steps to determining the right Chromebook
1 2 3
Identify the primary use case, or how the device will be used.
Map out the device specifications required for these use cases.
Make recommendations for devices that meet these needs.
Proprietary + Confidential
Primary use cases for the device 1
Web browser tab load(1) Medium High High High
Email
G Suite / Web productivity apps Note(2)
Video conferencing Note(2)
Android productivity apps (eg Office 365)
Note(2)
Always-on VDI/Persistent streaming
Note(2)
Run Linux beta
Display support Notebook screen External monitor Dual external monitor via docking station
4K monitor
1. Web browser tab load is the number of concurrent web browser tabs open. Medium refers to 14-25 and High is 26+.2. May be able to handle single tasks e.g., G Suite, Video Conferencing, VDI (e.g. Citrix), Android Apps each in isolation and provided that
there are no other concurrent system intensive applications. However, if the user needs video conferencing, VDI and/or productivity apps concurrently then the “For apps & virtualization” configuration is recommended.
Primary use cases for the device
Proprietary + Confidential
Workload tiers determine optimal system configurations
RAMCPU16 GB
4 GB
8 GB
i7
CeleronBrowsing + Single Tasks
+ Video Conf+ G Suite/Productivity
+ External monitor
+ Android Apps+ Citrix streaming
+ two monitors
+ Running another OS (eg Linux on Chromebook)+4K monitor
Workload intensity
Proprietary + Confidential
Use cases map to the device configuration 2
Minimum CPU* Intel CeleronAMD A6, MTK 8183
Intel Pentium, i3Intel i3, i5, i7
Intel i5, i7
Intel i5, i7
Intel i5, i7
Minimum RAM 4GB 8GB 8GB8GB
16GB
These were determined based on device testing data in Q4 2019 with Enterprise Enrollment & do not account for substantial changes to apps/software that were tested, thereafter. We intend to refresh this periodically to reflect changes in software and apps over time.
*Please contact your Intel representative regarding the availability and suitability of specific Intel Processor SKUs for specific opportunities.
● Tamper-resistant security modules designed by Google on every device
Prevent OS tampering
● Verified boot confirms the system is unmodified at boot-up
● Two versions of Chrome OS on every Chromebook
Firmware
Kernel
OS
Application
Signature
Signature
Signature
Success
Firmware
Kernel
Malware
Application
Reboot to get back to clean image
Reduce on-device data footprint● Files and customizations stored in
the cloud
● On-device user data is kept in an encrypted partition
● Wipe data on session end with ephemeral mode
Regularly patch and update● Feature updates available every 6
weeks
● Dev, beta & stable channels for early testing
● Updates take place in the background without downtime or interruption
Deter employee negligence● Google Safe Browsing prompts
users of malicious sites before they navigate to them
Continuous security
Designed by GoogleGoogle designs all Titan C chips, and monitors the manufacturing process to ensure quality. These chips are then shipped to factories to be built into a Chrome device.
Updated by GoogleAll firmware updates to these chips are pushed out by Google. When there’s a known compromise, you can rest easy knowing Google will push out a fix to all Chromebooks rapidly as soon as a solution is known.
Standard on Chromebooks Titan C chips are built into Chromebooks, available on devices across price points. They are always on and require no configuration to enable.
Titan C
User protection
Protection from login attempts on remote hardwareTitan C guards access to user data encryption keys. Even if a hacker had your password and hard drive, they wouldn’t be able to decrypt your data on a different device.
Protection from brute force password attemptsTitan C protects the device from brute force attacks so hackers can’t try millions of combinations of passwords or pin codes to attempt to log into the device.
Protection from phishing attacks Titan C enables two-factor authentication, that would require a power button press in addition to the password to log into the device.
Titan C
System integrity
Protection from malicious tampering of OS & firmwareTitan C assists with the Verified Boot process, which prevents malicious code from modifying Chrome OS.
Protection from enterprise policy non-complianceTitan C helps ensure that many policies set with Chrome Enterprise, like the ability to prevent users from putting their device into developer mode, are enforced on managed Chromebooks.
Protection from application access on compromised devicesTitan C can be leveraged by a third party developer to ensure that the device being used to access the application and it’s data hasn’t been compromised, through a feature called Verified Access.
Titan C
Limit attack surface
● Sandboxes contain all browser tab and application processes to themselves.
● Site Isolation keeps all processes within each browser tab separate.
Sandboxing
Chrome Web Store
● Extension reviews; manual and automated
● Visible permissions show users and admins what’s required to run extensions.
● Inline Installs of extensions are disabled as of mid-2018.
Chrome Extensions
Management policies
● Blacklisting & whitelisting extensions, manually or by permission
● Blacklist URLs to prevent access to malicious sites.
● Password alert policy requires users to change password when used with an unauthorized site.
Management
Managed Google Play
● Play Protect with always-on app analysis scanning and removal, scans over 500k apps everyday
● Curated app stores by user group with managed Google Play
● Configure app-specific policies with managed configurations
Android Apps on Chromebooks
Chrome OS + Active Directory
Device Identity (Domain join)
Native AD authentication (AD user)
GPO (AD Group Policy templates)
Kerberos NTLMv2 Google Play Store
Unparalleled multi-user experience
● Securely share devices via individual encrypted cloud profiles and managed guest sessions
● Flexible device configurations for different use cases
● Sign in to any Chromebook to pick up where you’ve left off
Device list 01
Search by organizational unit (OU)
Search and filter just about anything
New info! Auto update expiration (AUE) dates
Device list column customization
Unified app management 02
Chrome Web Store for selecting apps and extensions
Search and filter apps
Pin and provision websites
Contextual warnings
User and device settings 03
Search and filter settings
See which OU the policy was inherited from
New native printing settings: Duplex, pin and color defaults
Quick unlock with pin & fingerprint
Safe Browsing & Password Alert
Browser management 04
Chrome Browser Cloud Management
Pain PointsMultiple tools used to manage your browser and an inconsistent browsing experience and way to manage extensions across different OS’.
Solution: Chrome Browser Cloud ManagementManage Chrome deployments of any size centrally from the cloud, across Windows, Mac and Linux. Gain deeper insights into your browser deployment and centrally manage extensions.
Legacy Browser Support
Pain PointsUsers need to access legacy applications via legacy browsers, putting them at risk of being exposed to a less secure browser
Solution: Chrome Browser Cloud ManagementSet a list of URLs that only open in legacy browsers and built into Chrome Browser to simplify installation, minimizing the time users are in less secure browsers
Built-in troubleshooting tools and fast resets
Easily reset the entire OS, and turn off policies that could be causing problems
chrome://settings/reset
Stay productive on-the-go
Work productively while remote using top VPN providers
Device management with over 200+ policies
User and device policies
Fleet management
Bulk printer configuration
Access management
Use Cases4SECTION DIVIDER - DO NOT PRESENT
Cloud-ready use cases for Chrome Enterprise
Front of house Improve customer engagements
2
Field / mobile Access to information on the go or in distributed locations
1
Grab and Go with Chrome Enterprise (temporary users)Shared devices for temporary users or customers
4
Cloud-ready information workersMore secure, cost-effective, easier-to-manage replacement for legacy devices
5
Back of house Digitize back-office processes for workers
3
Here are six areas where customers can achieve success with Chrome Enterprise
6 Android and web developersSecure access to familiar, robust software for building great apps
Decentralized employees who need information such as compliance, HR, business priorities
Increase retention by investing in employees and improve customer experience
Panda Restaurant Group gives its store associates and manages access to corporate comms, productivity tasks and training with Chromebooks, O365 and custom-built applications
Digitize engagement and training
Use Case
Deskless shift employees such as line workers in manufacturing
Replace unsecure paper process while giving better access to job-related information and company comms
Sanmina moved from paper-based manufacturing to a cloud-based system where everything is stored smartly and safely in the cloud.
Improve back-of-house processes
Use Case
Use Case
Customer support, outsourced support, coders for insurance companies
Improve access to information while lowering complexity and cost
Mercado Libre uses Chrome OS with Neverware CloudReady to save its reps valuable time
Streamline contact centers
Use Case
Employees who are the face of your business, greeting or assisting customers
Fast and flexible technology makes provides a better customer experience, which positively impacts revenue
Help tickets are down 80%, and the total cost for devices is down 46% at Dr. Agarwal’s Eye Hospital
Empower front-of-house workers
Use Case
Employees who travel to remote sites or are mobile in a single location
Anywhere access to information to take action, make better decisions and stay engaged
Evira connects its workers in the field with critical information via Chromebooks and Citrix VDI.
Keep mobile workers connected
Use Case
Healthcare professionals who are mobile within a single location, travel from location to location, or use a shared workstation
More time to focus on patients rather than on IT with secure, mobile access to information
Middlesex Hospital saves crucial seconds using Chromebooks for its EMTs to access critical information in the field.
Give healthcare workers more mobility
Use Case
Encourage customer self-service
Use Case
Retail customers and medical office patients
Give customers and patients greater autonomy and free up your staff with self-service stations for check-in/out, research and program sign-ups.
Charles Schwab uses self-service Chromebooks to streamline its account set-up, which minimizes errors and employee time spent on administration.
Offer browsing and entertainment
Use Case
Patients, customers and library patrons
Provide temporary and secure device access to entertainment and information with the touch of a button
B&B Hotels reduced computing costs by an estimated $1,375 for every Windows laptop replaced with a Chromebook for guest web browsing.
Make temporary devices as easy as Grab and Go
Use Case
Temporary users, shift workers, employees who need loaners for broken or lost devices
Keep your workforce moving with a self-service, shared Chromebook solution.
With the Grab and Go program, a single Chromebook can be shared with as many as five people at Waymo.
Grab and Go with Chrome Enterprise
Self-service Quick sign-in Easy return 24/7 access High adoption
Grab and Go use cases
Loaners for under-repair, forgotten or lost devices
Devices that connect on-the-road employees
Shared devices that can be used by multiple shifts of workers
Cloud-native Chromebooks for all workers in your organization who need a loaner
Office workers who use G Suite and are entirely web-based
Secure collaboration, flexible access to information and the freedom to work from anywhere
Square is using Pixelbooks and G Suite to keep information workers productive as the business grows globally. Square’s IT team reduced setup time by 70% after adopting PIxelbooks.
Help web-based information workers work from anywhere
Use Case
Office workers using virtual desktop infrastructure (VDI) or thin client
Give employees a fast, secure and reliable way to connect to legacy applications via VDI
ATB Financial’s VMware and Chrome Browser solution is much easier than complicated VPNs.
Secure, fast VDI access for info workers
Use Case
Chrome Enterprise for developers
Use Case
Software developers that are focused on building web and Android applications
Chromebooks provide developers with secure access to familiar, robust applications, all while helping IT reduce TCO.
Developers at companies like Blend & Duo Security use Chromebooks to keep corporate IP protected.
IT remains challenged to provide a customized experience to their developers
Enabling developers to work from the cloud, businesses must validate three boxes
Many developers of the
business. Keeping this secure is of utmost importance
Building for a cloud first audience requires tools with familiar and robust functionality.
Modern tools for cloud-first workflows
Coding Android
Secure Shell
Google Cloud Shell Editor Apps Script
Chrome DevTools
Linux IDEs Android Studio
Progressive Web apps (PWA’s)
Chrome Extensions
Web
Android
Infrastructure
G Suite Plugins
Familiar Tools Robust cloud-first solutions
Managed Linux environments on Chromebooks (beta)
Containerized for
via policy
Internal access with
Using Google Cloud Shell & Shell Editor with Chrome Browser
Your favorite IDEs (like Android Studio) on your Chromebook
Linux-based command line available on your Chromebook