Eric Chiu, president of HyTrust, says asking tough security questions of cloud vendors is an essential first step. Chiu: Organizations should ask about all the same requirements they would ask themselves. He also recommends asking about policies on encrypting data and managing the keys; logging and auditing activities; configuration best practices; and more importantly, how are they securing their own cloud administrators in terms of accessing and getting to data? Chiu co-founded HyTrust Inc. in 2007 and served as CEO of the company until 2011.”]
Source: https://www.careersinfosecurity.com/asking-cloud-providers-right-questions-a-9540