Cloud services promise efficiency savings and economies of scale, but security and compliance concerns are holding back most organisations from taking advantage of them. Service providers should be more open about their security policies and practices.