ENISA page 32: Acquisition of the cloud provider could increase the likelihood of a strategic shift and may put non-binding agreements at risk.

A. Arbitrary contract termination by acquiring company. When a cloud provider is acquired by another company, there is a risk that the acquiring company may arbitrarily terminate existing contracts with customers. This can lead to service disruptions, loss of data, and potential legal and financial implications for the affected customers. The acquiring company may have different priorities, business strategies, or may not want to continue providing the same level of service to existing customers, resulting in contract termination. While the other options listed can also be potential concerns during a cloud provider acquisition, ENISA specifically highlights the arbitrary contract termination by the acquiring company as a risk concern. It emphasizes the importance of contractual agreements and the potential impact on customers when there is a change in ownership or control of the cloud provider. Therefore, option A, arbitrary contract termination by the acquiring company, is the correct answer according to ENISA.

enisa page 26

> The acquisition of the cloud provider (R.6) can also have a similar effect, since it increases the likelihood of sudden changes in provider policy and non-binding agreements such as terms of use (ToU).