Human-Centric Security in a Cloud-First World: An Executive Perspective