A cloud application caterer must provide top-class security and information privacy advanced than its users can do on their own and at no further cost. Policies and procedures should incorporate application, physical, data-level security, network, disaster recovery, and full data back-up.