According to a recent report on cloud security, 27% of organizations have experienced a security incident in their public cloud infrastructure within the last 12 months. Of these, nearly a quarter (23%) were caused by security misconfigurations in cloud infrastructure. As organizations shift to the cloud, achieving, maintaining and demonstrating regulatory compliance in this different IT environment is a significant challenge. Regulations on data localization and data sovereignty are being formalized. However, designing and implementing compliance policies for cloud environments is different from those of on-premises systems.