A risk model for cloud processes