Stormy times for cloud compliance?

Will other organizations follow Capital One's example of going all in on the public cloud? How should security and ERM experts ensure compliance in an increasingly cloudified IT world?