The data you can find in acloud ranges from public source,which has minimal security concerns, to private data containing highly sensitive information (such as social security numbers, medical records, or shipping manifests for hazardous material). If a business’s primary function is to provide services that don’t require sensitive data, then the security that they expect or need is less than that required for a business that processes sensitive information. Consider a scenario in which banks, other financial institutions, or businesses that process highly sensitive data decide to use a cloud. Such data’s nature explicitly dictates that its storage must employ a high degree of security. Additionally, the public trust that surrounds the handling of this data reflects an assumed level of high security.Does using a cloud environment alleviate the business entities of their responsibility to ensure that proper security measures are in place for both their data and applications, or do they share joint responsibility with service providers? The answer to this question will most likely involve legal interpretation. These examples demonstrate that the governance required in managing stored data and its associated applications is a function of the data itself. For example, the storage of personal information on the cloud creates its own set of regulatory concerns that indirectly impact security. Among these concerns are the following questions: