Explain your approach to securing an AI/ML workload in the cloud at Ascension. What specific controls would you implement?