In a cloud environment or hybrid, the discussion around security inevitably moves as a cloud service provider (CSP) enters the picture. While the CSP is liable for certain security aspects, there is a propensity for clients to “overtrust” cloud providers concerning getting and securing their data.