Getting cloud security right from the start