This paper presents a straightforward approach to cloud security. The structural foundation of this approach will not only assist in mitigating the risks associated with cloud deployments and usage, but also improve and standardize your security posture and practices across all your environments—public and private clouds as well as bare metal server clouds; and allow you to skip future security overhauls brought on by the emergence of new types of information technologies and security threats.