Risk Assessment
The 2009 risk assessment is still one of the most downloaded papers on the ENISA website. At the same time, the cloud computing market and its customers have changed over time and this changes our perspective on cloud computing security. ENISA in 2012 completed a first round of review and can be found in this section.
The key conclusion of this workis that the cloud’s economies of scale and flexibility are both a friend and a foe from a security point of view. The massive concentrations of resources and data present a more attractive target to attackers, but cloud-based defences can be more robust, scalable and cost-effective. This work allows an informed assessment of the security risks and benefits of using cloud computing - providing security guidance for potential and existing users of cloud computing.