The CIO-CISO Balancing Act in the Cloud