Cloud Service Providers (CSP) have seen a substantial rise in commercial and personal adoption of their services, compared to even a few years ago, particularly for the commodity services such as email and basic office applications. Given that corporates are now establishing a level of ‘trust’ with the major players such as Google G-Suite, Microsoft O365, Workday, Salesforce, this blog will look at the security considerations that a CISO should consider for their use of cloud services, beyond the previously considered high risk domains focused on vendor due diligence.