https://www.pivotpointsecurity.com/security-compliance-and-governance-in-the-cloud-how-do-they-relate/