A collaborative effort on mitigating (security) risks brought together by the Cloud Security Alliance (CSA):
https://cloudsecurityalliance.org/guidance/#_overview
Quoting:
"This version [V4] incorporates advances in cloud, security, and supporting technologies, reflects on real-world cloud security practices, integrates the latest Cloud Security Alliance research projects, and offers guidance for related technologies.
The goal of the fourth version of Security Guidance for Critical Areas of Focus in Cloud Computing is to provide both guidance and inspiration to support business goals while managing and mitigating the risks associated with the adoption of cloud computing technology."
And the V3 PDF can be found here:
https://downloads.cloudsecurityalliance.org/assets/research/security-guidance/csaguide.v3.0.pdf&ved=0ahUKEwjk9NXbw5_XAhWIuRQKHUq1BfYQFggxMAI&usg=AOvVaw3OEGdJjEzR7a4T762_jjLm
