 - Application Security 
RISK ANALYSIS 
STRIDE: All 
CSA REFERENCE 
Domain 2: Governance and 
Enterprise Risk Management 
Domain 3: Legal and Electronic 
Discovery 
Domain 8: Data Center 
Operations 
Domain 9: Incident Response, 
Notification and Remediation 
IS THREAT STILL RELEVANT?
  
TOP THREAT RANKING
 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
RISK MATRIX 
 
 
 
 
 
 
Perceived Risk 
Actual Risk 
 
© 2013, Cloud Security Alliance.  All rights reserved. 
20 
 
 
CLOUD SECURITY ALLIANCE The Notorious Nine: C