Unit 3: Risk Assessment

Question 1

Policy and Organization Risk example

Answer 1

1. Loss of Governance - which refers to the consumer not being able to implement all required contorls. This can lead to the consumers not realizing their required level of security

Question 2

Technical Risk example

Answer 2

The consolidation of IT infrastructure leads to consolidation risks, where a single point of failure can have a bigger impact.

Question 3

Virtualization Risk example

Answer 3

The portability of images and snapshots makes us forget that they can contain sensitive information and need protecting.

Question 4

Specific Technical Risks Example

Answer 4

Management plane breach - arguably, the most important risk is management plane (management interface) compromise (breach). Malicious users, whether internal or external, can impact the entire infrastructure that is controlled by the management interface.

Question 5

Legal Risks example

Answer 5

Cloud customers may have legal requirementws on the way they protect data, in particular personally identifiable data. The contorls and actions of the cloud provider may not be sufficient for the customer.

Question 6

Non-cloud Specific Risks example

Answer 6

natural disasters, unauthorized facility access etc.