Debate emerges over cloud concentration risk