CohnReznick interview question

Asked about cloud security controls