Cloud service risk and security control assessment workbook
Download this document free
Get this document with your free trial. Choose from the full Complyzard library.
Try 1 month free30 days free, then $19/month. Trial terms apply. Card required. Cancel anytime.Document information
An editable public-cloud assessment with 15 screening questions, 13 risks, 62 controls and 95 detailed questions, plus evidence and action fields.
Adapted edition
- Document type
- Questionnaire
- Format
- XLSX
- Pages
- 16
- Language
- English
- Version
- 1.0
- Updated
- 2026-09-16
- Category
- Information security
- Licence
- CC-BY-4.0
Description
For organisations assessing the risks and security controls of a proposed public cloud service. The source was written for New Zealand public-sector agencies, so its jurisdiction-specific statements and references must be checked before use. This workbook is an assessment aid. It records context, risks, controls and review evidence; it is not a completed risk assessment or a substitute for current legal, security or procurement guidance.
Contents
- Start
- Service context
- Screening
- Risks
- Controls
- Assessment
- Source and licence
Source and licence
Department of Internal Affairs, New Zealand Government
AttributionAdapted from Cloud Risk Discovery Tool version 23.09 by the Department of Internal Affairs, New Zealand Government, published on Digital.govt.nz, licensed under Creative Commons Attribution 4.0 International.
ChangesAdapted 16 September 2026: rebuilt the official ZIP/XLSM as a macro-free, query-free XLSX with seven visible worksheets; retained 12 context prompts, all 15 screening questions, 13 risk rows, 62 generic controls and 95 detailed questions with their suggested controls and explanations; added blank response, evidence, owner and action fields; removed VBA, Power Query connections, query tables, custom XML, source formulas and generated report sheets, very-hidden implementation sheets, external hyperlinks, NZISM/reference mapping columns, embedded imagery, official marks and personal editor metadata. The PDF is a complete read-only rendering of the retained content.
Version history
- v1.016/09/2026