The application of cloud computing in records and archives management（RAM）is not only an inevitable trend of intensive construction of government information system, but also a strategy to improve the quality and efficiency of RAM. In practice, records managers and archivists are full of expectations but worry about security issues. Security has become a key factor restricting the adoption of cloud computing in the field of RAM. This paper focuses on the government cloud in China and follows the basic process of risk management. Firstly, based on the existing academic literature and policies, referring to the three elements of risk, it discusses the records security risks in government cloud environment from the three dimensions of risk factors, risk events and risk losses. Then, it uses RAM professionals-oriented questionnaire survey and experts-oriented Delphi method to rank and grade the risk factors and assesses the probability of risk occurrence and the degree of hazards, in order to provide references for the development of records security strategy in cloud environment, and promote the integration of RAM into the overall situation of social informatization and digital government construction.