This document discusses the risks and preventive measures in cloud computing and microservices strategy. It covers topics such as lack of encryption, poor protection of IP, poor security management, poor constructed cross-platform tools, data leakage, poor defined SLAs, lack of data ownership, malicious employees, and failure to communicate with cloud provider in cloud computing. In microservices strategy, it covers topics such as disregarding the human-related factors, neglecting the DevOps and different testing factors, inappropriate service boundaries, introducing a shared model related to domain, assumption of the wrong communication protocols, failing to approach, and creating the wrong thing.