I am not advocating that CISOs and InfoSec teams plunge ahead with risk cloud applications -- what I am advocating for is that they partner strategically with the business to identify the types of solutions that would optimally serve business users and then look to put the appropriate sets of controls in place at the time.