1) Relying on passwords gives users a false sense of security. Elimination of passwords and relying on identity can get greater security. 2) Organisations see cloud security as data centre security. However, only streamlining people, processes and systems, can avoid security issues. 3) Phishing emails are not obvious these days. Built-in security protocols from email providers could tie up loose ends. 4) People should not assume that why would a hacker target them.