Cloud security requires a systemic and risk-based cloud security approach using a hierarchy of layered capabilities provided by cloud service providers.