Both vendors and customers share the responsibility of cloud security, and each have their own part to play. Before making a decision on your own particular vendor, ensure you have clarity on who will play what role in your partnership. This white paper highlights a non-profit organization's findings on the most typical security practices across the cloud computing industry. It explores both a general cloud security framework, as well as the basics that vendors can and should provide.