Where containers are used, container-specific security controls are implemented, which may include storing data outside the container so it survives container updates and replacement, verifying that configurations stop containers interacting unintentionally, securing containers from the applications within them, securing the host from containers and containers from the host, and monitoring containers for vulnerabilities with timely update or replacement. Where microservice architecture is used, the institution is aware of its security, reliability and latency issues, evaluates the implementation options before use and keeps them within its risk appetite with appropriate controls. Secure application programming interfaces are deployed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.