Computer software for assessing security risks to cloud-based information technology; computer software for assessing, auditing and reporting on cloud security risks