Without security controls, we're exposed to business email compromise which could result in operational disruption. There's a significant external attacker risk if these cloud VMs remain...