Implementing Required Security Controls in a Healthcare Cloud