Well, it's still not going to stop the general institutional incompetence that permeates the company when it comes to security. For example: https://www.nytimes.com/2017/07/25/world/europe/ibm-sweden-d...

Keeping sensitive data off the cloud altogether is the more sensible option.