How would you implement a security policy for a cloud-based application at Western Governors University?