In each evaluation, consider what additional work you have to do to raise the security to your level, advised Staten.
The responsibility for application security is shared between the cloud customer and provider.