Ensure VM Disks for Critical VMs Are Encrypted With Customer-Supplied Encryption Keys (CSEK)

By default, GCP encrypts all data with GCP owned keys. It is recommended to manage the encryption keys of VM disks in order to have more control and better monitoring of your environment.