Securing cloud infrastructure relies on understanding the additional risks presented by moving data or processes to the specific cloud infrastructure. The security of the cloud data and processes aligns with the overall risk strategy of the organization plus any controls the organization specifies to mitigate risk specific to a shared responsibility environment.