Steps for Cloud Security Assessment: Part 1