Start by reading the white paper Security in the SAS(r) Cloud. .
You will need your SAS Profile to access the paper. If you don't already have one, you can create it and then download the paper.
SAS realizes that there is no silver-bullet answer to security. It is about covering all the
bases, continuous improvement, and benchmarking against current best practices...
Security-conscious organizations have been trusting SAS with their valuable data for
over 17 years. Security and data privacy have changed significantly over that time and is
more important now than ever. SAS has evolved to meet these needs and now hosts
multiple petabytes of data for 450+ organizations across 73 countries.