Garten says there’s a misconception in the industry that traditional approaches to security can be applied easily to the cloud.