• Consistent with a risk-management approach for in-house services, outsourced cloud services should be surveyed against an association's risk criteria with the aim of distinguishing basic resources, analyzing potential vulnerabilities and threats to those assets, and building up an appropriate risk-mitigation technique.
• Lack of physical control of framework, as happens when the environment is outsourced to an third-party CSP, renders an intensive risk-management process.
• In customary situations, the physical area of sensitive data can be confined to dedicated systems, encouraging the distinguishing proof and execution of successful risk-mitigation controls.
• Traditional security approaches that construct security controls "around"
• Lack of physical control of framework, as happens when the environment is outsourced to an third-party CSP, renders an intensive risk-management process.
• In customary situations, the physical area of sensitive data can be confined to dedicated systems, encouraging the distinguishing proof and execution of successful risk-mitigation controls.
• Traditional security approaches that construct security controls "around"