Understanding how much risk a product can pose to your organization is necessary to create a complete security plan. This plan can enable you to take proactive steps to prevent, mitigate, and lessen the potential impact of selecting cloud applications that do not meet your organization’s risk appetite.

Through a joint effort between industry giants Google, Salesforce, Slack, and Okta, a baseline for security controls has been established to assist in determining the level of security provided by cloud applications and services. This effort has been titled Minimum Viable Secure Product (MVSP) and is the basis for this risk assessment checklist.

We’ve created this free cloud product risk assessment checklist to aid in identifying areas of concern with your prospective cloud application. Areas assessed within the checklist include the cloud application vendor’s business and operational controls, the application’s general design, and the implementation of its security controls.

Simply print the checklist and answer the survey questions, getting assistance from coworkers where needed. Tally your results to calculate your compliance percentage and your risk score. To prepare a report, we’ve included an executive summary template in the checklist. Follow the steps below to receive your checklist.