Since an application is for deployment on cloud , thus security will entirely be service provider's responsibility and not ours This assumption is