Is "security" as simple as cloud vs server based? This post outlines why InfoSec risks need to be carefully considered by lawyers and an informed risk assessment undertaken. Using email as an example, this post aims to show that server-based technologies are not necessarily more secure than their cloud equivalents.