The types of risks (e.g., security, integrity, availability,
and performance) are the same with systems in the
cloud as they are with non-cloud technology solutions.
An organization’s level of risk and risk profile will in most
cases change if cloud solutions are adopted (depending
on how and for what purpose the cloud solutions are
used). This is due to the increase or decrease in likelihood
and impact with respect to the risk events (inherent and
residual) associated with the CSP that has been engaged
for services.