Apply an organizational policy constraint at the organization level to limit the location of new resource creation.

Create an Assured Workloads folder for your required compliance program to apply defined controls and requirements.

Go to the Compliance page in Security Command Center. View the report for your status against the required compliance standard. Triage violations to maintain compliance on a regular basis.

Create a posture.yaml file with the required security compliance posture. Apply the posture with the gcloud scc postures create

POSTURE_NAME --posture-from-file=posture.yaml command in Security Command Center Premium.