This classic document is part of the body of knowledge of CCSK, and in general a good introduction into cloud and IT risk management.
The link for SME perspective on Cloud Computing on page 17 and 21 is broken. The page no longer exists.