Measures taken to ensure that only authorized personnel have access to sensitive information in the cloud.