One of our clients is considering a major Cloud transformation project but is concerned about the time and costs associated with such an initiative. What should the security team focus on to address this particular client's concern?