Cloud security differs from traditional IT security primarily in that it operates on a shared responsibility model, where the cloud service provider secures the infrastructure while customers protect their applications and data. In addition, cloud security emphasises scalability and dynamic access control to accommodate remote users and distributed environments, unlike traditional IT security that focuses on perimeter defences and on-site management.