“With the physical data center we used a castle & moat approach based on networking, but in the cloud we have no clear perimeter and need to take an application-centric approach to security.”