You moved the books to the cloud and built a global team. The efficiency gains arrived on schedule. The security responsibility? That stayed with you. Here is how to close the gap between what your provider promises and what security requires.