1. An apparatus for enforcing a compliance requirement for a software application in execution in a virtualized computing environment, the apparatus comprising: at least one processor and a memory, the memory comprising instructions executable by the at least one processor to control the apparatus to at least: (a) identify a resource instantiated for execution of the application; (b) retrieve a compliance characteristic for the application, the compliance characteristic being retrieved based on the identified resource and having associated a compliance criterion based on a formal parameter, the compliance criterion defining a set of states for the instantiated resource that comply with the compliance criterion and therefore constitute compliant resource states; (c) select a software component for providing an actual parameter corresponding to the formal parameter, the actual parameter being based on data concerning the resource; (d) evaluate the compliance criterion using the actual parameter; (e) in response to a determination that the resource has a state that is outside the set of compliant resource states, the determination being based on the evaluation of the compliance criterion, modify the software application to a modified software application having associated a resource with a state belonging to the set of compliant resource states; and (f) repeatedly monitor for change to one or more of the resources, wherein (a), (b), and (d) are responsive to each detection that one or more resources is/are changed, and wherein, in (c), the selected software component is selected based on an identification of one or more data items providable by the software component.