Still, a Ponemon Institute survey found, only 11 percent say they have no plans to use the cloud for sensitive operations.