Ignore cloud security assessment at your own risk