Most organizations did not fail at cloud security because they misunderstood the technology, rather they failed because they tried to secure it afterwards.