rprise Risk Management 
Domain 9: Incident Response 
 
IS THREAT STILL RELEVANT? 
 
TOP THREAT RANKING
 
 
RISK MATRIX 
N/A 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
 
© 2013, Cloud Security Alliance.  All rights reserved. 
19 
 
 
CLOUD SECURITY ALLIANCE The Notorious Nine: Cloud Computing Top Threats in 2013 
8.0 Top Threat: Insufficient Due 
Diligence 
Cloud computing has brought with it a gold rush of sorts, with many 
organizations rushing into the promise of cost reductions, operational 
efficiencies and 