1) Cloud systems are "secure enough" out of the box; 2) They need fewer staff resources; 3) Separate teams for security & IT are just fine...
