For instances in which our clients have their systems installed in the cloud (e.g., Amazon AWS, Microsoft Azure, Google Cloud), one of our system administrators will log into the cloud account and determine if everything hosted there--such as servers, databases, and file systems--is secure.  The administrator will examine security groups, fire walls, and server configurations. He or she will also confirm that the number of users permissioned on a server is correct and that no accounts exist for people who have left the organization.