Modernizing GRC: How to Mitigate Risk in Hybrid Cloud Environments