CloudWATCH2: Risk-Based Decision Making Mechanisms For Cloud Service In The Public Sector

This is the initial version of an incremental deliverable documenting the overall process adopted by CloudWatch2 to develop risk profiles for (prospective) cloud service customers from Public Administrations. Besides the actual process, this deliverable also presents the results of desktop research, which will be used to develop specific risk profiles in the second and final iteration of this document (D3.5).

The expected outcome from the associated task (T3.3) is to produce a set of risk profiles and corresponding security controls, applicable to both Public Administrations and Small and Medium-sized Enterprises (SMEs), and validated through real-world use cases.