ntec Finds 
http://news.investors.com/technology/011613-640851-cloud-computing-data-
loss-high-in-symantec-study.htm  
2.       Kill the Password: Why a String of Characters Can’t Protect Us Anymore 
http://www.wired.com/gadgetlab/2012/11/ff-mat-honan-password-hacker/  
 
RISK ANALYSIS 
CIANA: Availability, Non-Repudiation 
STRIDE: Repudiation, Denial of 
Service 
CSA REFERENCE 
Domain 5: Information Management 
and Data Security 
Domain 10: Application Security 
Domain 12: Identity, Entitlement 
and Access