When adopting a cloud service--whether it's software as a service or platform as a service--enterprise IT organizations frequently make the assumption that the provider's security will be an improvement over the security of their own on-premise systems. Verifying that this is true, however, is tricky, and, in the end, there are no guarantees.