Testing security controls against realistic attacks is pivotal to ensure controls are working as expected. Workloads are now an especially important part of technology infrastructure, thanks to the shift to the cloud. Attackers frequently target workloads, leading to breaches, so it is critical to test workload security controls. Security leaders can use this report to test Zero Trust workload security controls, leveraging tactics and techniques from the MITRE ATT&CK framework.