An organization should consider all its requirements when choosing a third-party provider for its cloud service — not only in terms of features but also in terms of security and access control