Cloud computing offers users the promise of economies of scale, flexibility and reduced costs. But security is often raised as the number one barrier to adoption. When you deploy applications on your own IT systems or an outsourcer deploys them on your behalf you have either direct control or a line of sight into the controls applied by the outsourcer. The governance structures, technology, business processes and organizations are usually well understood.