A notional cloud security approach