I think the business risk, or the perceived risk of placing sensitive info in the cloud will start to wane. While IT might have been a roadblock in the past, as more cloud initiatives are business driven - meaning people, budgets, processes - IT will need to accommodate those as facilitators rather than security guards. The perception of risk drops when the cost benefits, agility and efficiencies outweigh the risks. Soon it might be a business risk (financially, operationally, whatever) to not have some compute in the cloud.
Of course, things like management and visibility tools (to report) need to be in place for this to happen.