How to write a cloud security policy

A formal information security policy is not an optional item for your business; that's pretty much accepted as a given. Yet when your company migrates to the cloud, in any capacity from data storage through to application delivery, it's often mistakenly accepted that the existing policy will cover this new ground.