Adherence to standards and frameworks and compliance with regulations and data encryption and storage practices and previous track records must be considered to evaluate cloud security services.