Moving to the cloud, whether it is IaaS, or SaaS, is nearly inevitable in the current market. As a user of cloud services, it is important to understand the risk and control landscape an organization must navigate. Learn what an organization should know when using cloud providers as a component of their supply chain. Hear about internal control boundaries and who is responsible for what. Explore tools and resources, such as the Cloud Security Alliance and ISO/IEC 27017:2015, that an organization can utilize when determining control boundaries and assessing internal controls. Monitor your cloud provider's controls through SOC examination and understand complementary user entity controls.