“Google successfully improved its security posture by gradually implementing comprehensive security governance policies for identity management and application allow-listing.”