Core cloud data risk scenarios – and how to stop them