The statement that IT security risk management is challenging comes to no surprise to security professionals today. The rapid landscape of IT change is the highest it has ever been with the introduction of cloud SaaS/IaaS/PaaS products and the migration to large cloud providers such as Google, Azure, and Amazon.