Confidence in cyber security for cloud applications