es / Responsibilities 
CCM IS-15: Information Security - Segregation of Duties 
CCM IS-18: Information Security - Encryption 
                                                          
 
1 http://www.cert.org/insider_threat/ 
RISK ANALYSIS 
STRIDE: Spoofing, Tampering, 
Information Disclosure 
IS THREAT STILL RELEVANT? 
 
TOP THREAT RANKING
 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
RISK MATRIX 
 
 
 
 
 
 
Perceived Risk 
Actual Risk 
 
© 2013, Cloud Security Alliance.  All rights reserved. 
17 
 
 
CLOUD SECU