When using third-party cloud services, enterprises should prioritize encryption of data at rest and in transit and manage keys themselves (BYOK) to reduce the readability of data if the cloud platform is compromised.