Everything is a service so who is responsible for controlling and securing it?Who audits their stewardship of these responsibilities?Who hires and vets the staff?Who ensures regulatory compliance and how?Location of data.Encryption and secure data transfer.Access control; both physical and remote.Disaster recoveryBusiness continuity.Forensics