Who owns the risk, who takes responsibility?
IT and other managers routinely make decisions about risk. They have the choice to (i) accept and self-manage that risk, (ii) mitigate it, (iii) avoid it or (iv) to transfer it. The risks associated with cloud computing need similar assessment, although the option to avoid or transfer all the risk to the provider is commercially [...]