This Recommendation provides framework of risk management in cloud computing environment, including risk assessment, risk treatment, risk acceptance, risk communication and consultation, and risk monitoring and review. It also provides a complete set of management processes and effective measures to reduce risks in cloud computing environments.