What does control A.5.23 (Information security for use of cloud services) address?

• A.Managing information security risks associated with the acquisition, use, management, and exit from cloud services
• B.Reviewing the physical and environmental protections, power supply, cooling, and fire suppression of the cloud provider's data centre sites in each region
• C.Encrypting the data, keys, backups, and archives that the organization stores with a cloud provider before the contract is signed by the legal team
• D.Selecting the cloud region, instance size, storage tier, and billing plan that give the lowest total cost over a three-year contract term