 REFERENCE 
Domain 1: Cloud computing 
architectural framework 
Domain 5: Information 
management and data security 
Domain 11: Encryption and key 
management 
Domain 12: Identity, entitlement, 
and access management 
Domain 13: Virtualization 
IS THREAT STILL RELEVANT? 
 
TOP THREAT RANKING 
 
SERVICE MODEL 
 
IaaS 
PaaS 
SaaS 
RISK MATRIX 
 
 
 
 
 
 
Perceived Risk 
Actual Risk 
