Moving to the cloud? Here is what to decide first: shared responsibility, identity, monitoring and who watches your cloud after hours.