Cyber Security & The Cloud: What Needs to Change