Migrating to the cloud can create opportunities for enterprises, but it can also introduce serious security risks. All too often, security controls are not implemented until well after the migration is complete, and out-of-the-box controls are passed over because of the perception that they will frustrate business users and hinder service adoption. Even worse, document controls tend to come last because of the effort required to implement them — and by then, users are already sharing content freely, including sensitive data.