Only 43 percent of cloud computing service providers polled in the United States perceive security as very important or important for meeting IT and data processing objectives. Two-thirds of U.S. cloud providers display a lack of confidence that their customer’s security requirements are being met. Providers tout their security capabilities, but are least confident in restricting privileged user access to sensitive data. Nearly 70 percent of users said vendors were most responsible for ensuring the security of cloud resources; only 32 percent cited themselves.”]
Source: https://www.govinfosecurity.com/whos-to-secure-cloud-vendor-or-user-a-3587