Putting Continuous Security First in Your Cloud-first Strategy