Abstract: An example computer system for implementing controls for a cloud computing environment can include: one or more processors; and non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to create: a repository engine programmed to consolidate the controls for the cloud computing environment; a workload engine programmed to determine an applicability of the controls to data stored in the cloud computing environment; an adherence validation engine programmed to validate compliance of the controls of the cloud computing environment with the control requirements; a security risk engine programmed to assess security risks associated with the cloud computing environment; and an adherence monitoring engine programmed to continuously monitor compliance of the cloud computing environment with the control requirements and measure changes to the security risks.