Security standards for protecting workloads running in cloud environments are formally defined
The workload protection policy facet sets the security requirements every cloud workload must meet before and while it runs, one leg of A.5.23's technical scope.
Written security requirements every cloud workload must meet before and while running extends A.8.9's configuration baseline to virtual machines, containers and functions.