I blogged last year about ownership, control, and possession in relation to high-value cryptographic keys, in particular those used with an organization’s applications in the cloud. The main considerations and themes still hold true: Organizations should first ensure that sensitive data is encrypted...