I find this extract interesting
More than 60% of financial services respondents said security is the main factor driving cloud deployment decisions, and they also cited data security and compliance as top considerations when deciding among infrastructure options for hosting a particular workload, the report said.
To me, it’s not so much the compliance and security programs of the cloud operators. The general consensus should be to treat all data - irrespective of where it is domiciled - in the same manner. Ideally, your cloud should be private if it contains sensitive information, and should be considered as an extension of your estate. For example, no public access - only permitted from your corporate LAN.