I noticed Trend Micro has a list of the Top 5 Myths of Cloud Computing Security.

…while a provider might take responsibility for security, the enterprise is ultimately accountable in the event of a compromise or breach. It is your data.

Well said, but I do not see five in their five, I see two.

1. It is easy to transfer liability
2. A cloud is more secure because it is big

Those are big buckets, I admit. I think people should really be clear on those two myths. Trend talks the usual talk about SAS70 being a limited review, which fits into number one. They also talk about needing redundancy in IaaS providers, which fits into number two, and so on.