While security and privacy concerns when using cloud computing services are similar to those of
traditional non‐cloud services, concerns are amplified by external control over organizational assets and
the potential for mismanagement of those assets. Transitioning to public cloud computing involves a
transfer of responsibility and control to the cloud provider over information as well as system