[twelve] for instance, a demonstrable need to have may be the necessity for an agency to implement supplemental protection controls to handle particular legal necessities pertaining to an company’s use from the procedure. This process for assessing and documenting the security of cloud computing items and services can be a shared obligation betw