A Top-Down View of Cloud Risk