Mapping of security controls terminology between on-prem and public cloud