Cloud Security Risk Assessment Questionnaire

Company/Project Name

Contact Person

Email

Cloud Service Provider

Assessment Date

What types of data are stored in the cloud?

Is data encrypted at rest? Yes No

Is data encrypted in transit? Yes No

Where is your cloud data physically located?

How are user roles and permissions managed?

Is Multi-Factor Authentication (MFA) implemented? Yes No

Are third parties granted access to the environment?

Is security monitoring/logging enabled? Yes No

Is there an incident response plan?

Which regulatory requirements must be met? (e.g., GDPR, HIPAA)

Is there a documented cloud security policy?

Please specify any other cloud security concerns or comments