From a recent Forbes article by Sue Poremba on cloud security:
Today, cloud technologies do more than ever to invest in ensuring the security of customer data. This includes security tools and controls such as physical protection, advanced encryption, multi-factor authentication, automatic backup, identity and access management controls. Cloud providers are regularly executing penetration testing and enable continuous auditing for complete visibility of the infrastructure. This allows for improved compliance with industry regulations and standards like HIPAA or PCI DSS*.