Process of analyzing and verifying the security posture of cloud infrastructures, services, and applications. Includes assessment of IaaS, PaaS, and SaaS configurations, review of IAM policies, analysis of storage buckets, network security groups, encryption at rest and in transit, compliance with cloud-specific frameworks (CSA CCM, ISO 27017), identification of misconfigurations and shadow IT, and evaluation of the shared responsibility model and compensatory controls for multi-tenant environments.