I. The service risk assessment process
- Vulnerabilities Identification - this step requires being
aware of the service and the operational environment
architecture. We consider the involvement of the SP who
knows the internal structure of the provided service and the
CP who knows the cloud platform architecture.