The cloud movement presents a rare and momentous opportunity to revisit not only how we think about computing, but also how we think about information security. This whitepaper, written by the Cloud Security Alliance, provides an in-depth discussion of the security considerations for public and private clouds. Topics include business agreements, physical and virtual attack surfaces and most importantly, where do the security responsibilities lie.