In the stage, the cloud environment is analyzed to identify potential vulnerabilities and shortcomings that threats can exploit. The cloud provider can be asked to produce statistics and other information about past attacks (successful and unsuccessful) carried out in its cloud.

Risk assessment

Explanation:

As applications keep migrating to the cloud, the security of these applications and data become serious issues for consideration. Cloud-related Risk assessment becomes pertinent before systems are deployed to the cloud.

Some of the risk assessed are:

The organization's APIs on the cloud can be compromised.Data corruption and deletion riskAttack on credentials risk: This happens when basic information about an organization is targeted by the attacker for access to a sophisticated system.The staff becomes uncomfortable as they deal with new work complexity. Staff within the organization have to learn to deal with new environments and work ethics.

Ithink the answer is both.