An applied methodology for information security and assurance: A study case for cloud computing