Most agencies these days have a "cloud first" policy, resulting in the migration of mission critical applications and data to the cloud. Many of these applications manage sensitive information such as Personally Identifiable Information (PII) and Protected Health Information (PHI). When an agency decides to procure a cloud-based solution, they are essentially taking their