Three Strategies for Organizations to Reduce Attack Surfaces and Mitigate Cloud Risk