Richard and Greg talk to Andy Malone about security in cloud computing. Once an application is moved to the cloud, where is the data itself? It could be distributed across multiple countries. Who is responsible for protecting it, for maintaining legal compliance, etc. Service level agreements are key, but how do you enforce them?