Processing or storing sensitive data outside your organisation creates security concerns and cloud users should demand transparency from service providers.
An organisation’s risk appetite will direct the level at which they use the cloud. Some things may be deemed just too risky to outsource and if your provider doesn’t offer a good disaster recovery plan, you may want to think again. But on the other hand some service providers offer higher levels of encryption than a small company could afford to go out and get for itself.