When outsourcing a business process to a cloud service provider, it is most important to understand that accountability for the risk will remain with the organization. Even though the service is outsourced, the ultimate responsibility for managing and mitigating risks associated with the outsourced service lies with the organization that owns the business process.