The cloud security alliance also published the top 20