From Inhibitor to Facilitator: Aligning Security to Cloud Processes