The ambiguity that surrounds cloud computing can make securing it come across as an exercise in herding cats. The challenge exists not in the security of the cloud itself, but in policies and technologies for security and control of the technology. This session discusses some of the misconceptions and misunderstandings about what the technology can offer, and what Chief Information Security Officers need to take into consideration when formulating strategies around cloud computing.