Cloud Security Risk Assessment Form
Project / System Name
Project Owner
Contact Email
Assessment Date
1. Cloud Service Information
Cloud Service Provider
Cloud Service Type
IaaS (Infrastructure as a Service)
PaaS (Platform as a Service)
SaaS (Software as a Service)
Other
2. Data Classification & Compliance
Type of Data Hosted
Data Sensitivity Level
Public
Internal
Confidential
Restricted
Compliance Requirements
3. Identified Risks
Risk Description
Likelihood
Low
Medium
High
Impact
Low
Medium
High
Existing Controls / Mitigations
Recommended Actions
4. Additional Comments
Comments