tandard catalogue of best practices to secure cloud computing, 
comprehensively addressing this within the thirteen domains of CSA Guidance and ten categories of service associated 
with the SecaaS Implementation Guidance series.  Already, many businesses, organizations, and governments have 
incorporated this guidance into their cloud strategies.   
 
However, CSA recognizes that a central component of managing risks in cloud computing is to understand the nature of 
security threats.  The purpose of the “