A recent CSA study evaluated over 600 security professionals and 25 enterprise security executives to better understand the challenges and effectiveness of current risk management practices towards the public cloud. This report shares the top benefits and challenges for risk practices towards cloud including the evaluation, assessment, and procurement of cloud services to the understanding of risk tolerance and why cloud is different.