http://www.cloudsecurityalliance.org/guidance/csaguide.pdf
Interesting read to start building those questions to ask of your Cloud Vendors.
2 and 3, yes. Absolutely.
1 and 4 just indicate you don't understand the value of cloud computing and are an IT employee trying to protect your turf - likely to disappear quickly because the decision maker is looking at the cost factors, not fear factors that he is looking to eliminate.
At least in my experience....
-Vlad
Vulnerabilities are still there in cloud computing environments. In the case of small businesses you may have only moved the target to be more consolidated.
![[There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not.]](http://www.sbslinks.com/images/headertop.png "There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not!")