Predictions, predictions everywhere, but are there any facts?

Gartner has predicted, for example, that by 2016 some 40 per cent of enterprises will "make proof of independent security testing a precondition for using any type of cloud service". That's less a prediction and more a dead cert, apart from the numbers of course. I'd be amazed if less than half of enterprises thought it worth checking that their proposed cloud provider has been properly evaluated and certified as compliant and secure.