Companies need to grasp implications of moving to cloud and develop a roadmap to holistically secure IT systems instead of deploying security products for individual stacks.