Cloud Service Authorization and Monitoring (SS-26-003): Establishes minimum requirements for validating, authorizing, and continuously monitoring third-party cloud services, including Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS)