Security and Compliance in the Cloud