I don't want to bash cloud or anything but it serves as a wake up call for people who think cloud secures everything. From the document you can see just because you have cloud doesn't mean you are secure. Getting cloud satisfies maybe one or two requirements and adds a whole new layer of security requirements.