Key Aspects of Evaluating Cloud Security Posture