Businesses should consider the provider's data security, backup and disaster recovery plans, access controls, and regulatory compliance requirements when implementing IaaS. They also need to ensure proper configuration and management of their virtual environments.