Thoughts about Security, Compliance and Cloud