With the possible exception of Table A, I'd expect most people in business to be able to understand a framework like this. And even a sole trader needs to be aware of risks, IT or otherwise. Your suggestion of using the cloud where possible is effectively about outsourcing risk mitigation - because you don't have the technical resources to do it - but I would say that the risks are still yours to assess and manage.