Cloud Computing provides a scalable, high availability and low cost services over the internet. Security and privacy concerns have been creating obstacles for the enterprise to entirely shift to cloud. The increase security risks are required to be identified to assist Cloud customers and Cloud Service Providers (CSP) for better information technology (IT) governance.ISO/IEC 27001:2005 and NIST SP 800-53 Rev.3 are most widely used by the CSPs to mitigate Cloud risks. The metrics are the best tool to take good decisions on the base of qualitative and quantities analysis, efficiency and...