be specific about ownership of cloud controls matrix