Cloud risk management AWS Azure GCP, Attack surface management or breach and attack simulation tools, Vulnerability management and exploit lifecycles, Cissp, Purple teaming red teaming or detection engineering, Security control impact on risk reduction, CRISC, gcih, Risk quantification models FAIR or similar