Three service models are commonly implemented in the cloud: software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS). For any organization that uses servers or cloud storage, there is a security policy domain established for security and control and needs to be carefully checked by experienced people to ensure that all possible risks are identified.