The best way for IT organization with line of business application development responsibilities to develop new capabilities is to experiment. Not haphazardly, mind you, but in a systematic and planned way.
Planning your first custom cloud application is no exception: while IT must do everything it can in order to develop new capabilities so the business can compete, the security ramifications of cloud computing need to be well understood so that undue risk isn’t brought to the business.
Contrary to popular belief, cloud security isn’t a contradiction in terms. Read more here about architecting cloud applications in a secure way.