This Recommendation provides an overview of multi-cloud, and analyses security risks and specifies appropriate guidelines for multi-cloud to mitigate security risks.