Cloud Computing provides a scalable, high availability and low cost services over the internet. Security and privacy concerns have been creating obstacles for the enterprise to entirely shift to cloud. The increase security risks are required to be identified to assist Cloud customers and Cloud Service Providers (CSP) for better information technology (IT) governance. ISO / IEC 27001: 2005 is most widely used security standard by the CSPs to mitigate...