1     Scope           
 2     References 
 3     Definitions 
        3.1     Terms defined elsewhere        
        3.2     Terms defined in this Recommendation            
 4     Abbreviations and acronyms              
 5     Conventions             
 6     Overview and framework of risk management in cloud computing environment        
 7     Risk assessment in cloud computing environment    
        7.1     Identification of key points      
        7.2     Identification of threats            
        7.3     Identification of vulnerability 
        7.4     Proactive measures for risk     
        7.5     Risk estimation             
 8     Risk treatment in the cloud computing environment               
        8.1     Risk reduction               
        8.2     Risk retention               
        8.3     Risk avoidance              
        8.4     Risk transfer  
Appendix I – Key point weight for risk management in the cloud computing environment    
Appendix II – Threat frequency in cloud computing environment     
Appendix III – The formula of risk estimation     
Appendix IV – Mapping of threats and key points for risk management in the
cloud computing environment     
Appendix V – Mapping of threats and proactive measures for risk in the cloud
computing environment     
Bibliography