The majority of companies deploying cloud ... computing solutions have no cloud-specific security policies and procedures in place and have no measures to approve or evaluate cloud applications ...