Public cloud services are quickly becoming a part of the IT configuration of companies of various sizes. Rapid provisioning of resources and applications, easy scalable storage, all without breaking the bank on infrastructure expense, make cloud an appealing choice. However, for many IT decision makers, security is still a major blockade to implementing cloud initiatives. The doubt forces them to choose a 'hybrid' approach for their IT, or completely avoid adopting the cloud. Does it have to be that way?