When the topic of security comes up while implementing Cloud-based solutions, customers will often talk to me about issues they think are important:

ISO 2700X certification
Physical media destruction policies
Police Checks for support staff
Data Sovereignty and privacy issues
and in some cases, counter-measures for volcanic and tectonic plate movement.