“Cloud security” is an amorphous term that hampers growth and adoption of cloud services. The first step toward adoption is identifying the types of cloud services that need securing—SaaS, PaaS and IaaS. Only then can the various security and compliance challenges facing each model be examined and solved.