Using cloud services allows your organization to hand off “the basic blocking and tackling” of securing an infrastructure. But it also allows a cloud service provider to hand your organization’s data to the government. Organizations should encrypt data before it ever enters the cloud and keep the encryption keys themselves, says Elad Yoran. This would prevent the government from acquiring multiple cloud users’ data even if it only needed one user’s data. It would also address the “data residency” problem, since a court ruling against Microsoft in July may not work anymore.”]