1. A method to facilitate bursting of a cloud application to a new cloud provider, comprising: identifying a set of security requirements of the cloud application, the set of security requirements being associated with a security assurance level; identifying a set of security capabilities of a candidate new cloud provider; determining a minimal security environment needed to meet the security requirements of the cloud application in the new cloud provider; deploying a new security environment in the new cloud provider having at least the security capabilities of the minimal security environment; and receiving and deploying the cloud application in the new security environment by completing a burst operation.