Annex A disclosure item (Security configurations) that a public provider completes for each cloud service: Whether the provider can monitor, track, apply and enforce the customer's own security and privacy policies on its workloads: data protection and key management across location-based resource pools and during migration, customer-held keys and keystores, data flow segmentation that persists through migration, and compliance for regulated workloads moving between on-premises, private and public cloud. Items the provider cannot or will not disclose carry a remark, and the completed form is signed by the provider and the certification body's lead auditor.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.