Cloud computing offers new possibilities and new security challenges. These challenges range from governance, through to securing application and infrastructure. Fundamentally it is important to be able to assure the security of these new models in order to build trust and confidence. IBM has extensive experience of delivering in shared environments, a common characteristic of cloud. This experience ranges from managed services, through to infrastructure as a service and platform as a service. This paper introduces IBM's approach to delivering cloud security for infrastructure services.