The departmental security policy is reviewed and amended so that controls remain effective when business applications move to the cloud, adding or revising requirements for the areas cloud makes specific, among them shared tenancy, where data resides, virtualisation and safe consumption of cloud services, and aligning them with the published, publicly accessible third-party reports of provider practice.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.