“The main element you cannot delegate to your cloud service provider is your responsibility for security, compliance and customer trust.”