Abstract
Software in the cloud is predominantly developed using agile methodologies, where practices such as continuous deployment and DevOps contribute to increased speed and quick turnarounds. This increased speed does however require additional focus on software security in order to avoid security bugs and architectural flaws from crippling a cloud business. Architectural Risk Analysis has been touted as one of the most powerful software security activities, but in some agile development projects there is no distinct architecture activity, and often no dedicated architects. In this paper we will examine the challenges of performing Architectural Risk Analysis in agile development projects.