Part of it is that the world has sort of shifted from closed networks where security was very tight to these open networks that are highly interconnected, and that has created a lot of complexity. From a user perspective, I think keeping your organization and organizations that you've established trust with safe is first and foremost the best way to protect that data. People need to be conscious of how they use their data across the Internet. When you send your data to Joe's Flowers, it's not the same as storing it at TD Bank.
When you think about a cloud, the organizations like ours, that have invested in providing security infrastructure through a cloud, spend a lot more time thinking about how to protect that data than do the small independent businesses that also store the same kind of sensitive information.