The building blocks of a cloud security strategy