Managing Compliance and Security in the Cloud