cloud contractor risk