Cloud security demands a shared strategy for HIPAA compliance