The cloud has turned security as we know it on its head. It looks and operates differently from the familiar data center, and traditional security practices don’t fully cover the cloud. The cloud attack surface is different as well, and so are the patterns used when cloud environments are attacked.  Working closely with cloud security and engineering teams that are transforming how they do cloud security at scale has revealed five fundamental strategies that they all focus on to minimize cloud risk, help teams move faster, and maximize the ROI of their security programs. These strategies are: know your environment, prevention and secure design, empowering developers, policy as code, and measuring what matters.