Secure the cloud/infrastructure layer (the trusted computing base): provider account security, infrastructure configuration, network controls and the environment hosting clusters, per the 4Cs of Cloud Native Security.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.