Policies, technologies, and controls that protect data, applications, and infrastructure hosted in the cloud from unauthorised access and cyber threats.