Cloud Security Assessment and Improvement Strategy