Be certain that a concept of separation of responsibilities is carried out and reasonable access controls and account lockout/disabling controls are in position. Having said that, People cloud functions can still be viewed as Component of the general company network, and securing them is a component of network security. https://ieeexplore.ieee.org/document/9941250