Cloud security must switch from short term reactions to stra