This is the big unanswered question about cloud computing. The reality is that most organizations are not evaluating their cloud providers at all. That's a dangerous approach. You absolutely need to be asking the tough questions up front and then making sure they keep their promises moving forward. Periodic and consistent is the best approach - whatever that means in your environment. In the interest of adding some humor to this discussion while driving home the point this is a must-see video on cloud computing security oversights.

This is the big unanswered question about cloud computing. The reality is that most organizations are not evaluating their cloud providers <i>at all</i>. That's a dangerous approach. You absolutely need to be <a href="http://searchcompliance.techtarget.com/tip/Twelve-ways-to-keep-your-cloud-strategy-compliant">asking the tough questions up front</a> and then making sure they keep their promises moving forward. Periodic and consistent is the best approach - whatever that means in your environment. In the interest of adding some humor to this discussion while driving home the point <a href="https://www.youtube.com/watch?feature=player_embedded&v=VjfaCoA2sQk">this is a must-see video on cloud computing security oversights</a>.