Google manages a fleet of several hundred thousand client devices (workstations, laptops, mobile devices) for employees who are spread across the world. We use the following principles to run our device fleet securely and at scale: secure default settings at depth with central enforcement. All device management policies are stored in centralized systems which allow settings to be applied both at the fleet and individual device level. This way policy owners and device owners can manage sensible defaults or per-device overrides in the same system.”]
Source: https://security.googleblog.com/2019/08/how-google-adopted-beyondcorp-part-2.html