Cloud security remains a continuously evolving landscape. This session will discuss our research on cloud security challenges and MITRE ATT&CK as a solution. We surveyed and interviewed leading security professionals to investigate how they assess and confront these challenges. We will discuss the gaps we discovered, followed by recommendations.