The Crucial Role of Service Control Policies, Multi-Factor Authentication, and Personal Responsibility in Cloud Security