Does using a cloud environment alleviate the business entities of their responsibility to ensure that proper security measures are in place for both their data and applications, or do they share joint responsibility with service providers? The answer to this question will most likely involve legal interpretation. These examples demonstrate that the governance required in managing stored data and its associated applications is a function of the data itself. For example, the storage of personal information on the cloud creates its own set of regulatory concerns that indirectly impact security. Among these concerns are the following questions: