European Union Agency for Network and Information Security (ENISA)

---

European Union Agency for Network and Information Security (ENISA) is a similar standard and model as NIST, but for the EU.

• https://enisa.europa.eu

Cloud Computing: Benefits, Risks, and Recommendations for Information Security

• guideline that identifies 35 types of risk organizations should consider
• identifies the top 8 security risks based on likelihood and impact:
  • Loss of governance
  • Lock-in
  • Isolation failure
  • Compliance risk
  • Management interface failure
  • Data protection
  • Malicious insider
  • Insecure or incomplete data deletion