Where microservices architectures are used, each microservice is an independent, loosely coupled building block with its own business logic and network functions, distinct identities and mutual authentication in every client-to-microservice, microservice-to-microservice and egress interaction, and management applies the security strategies of NIST SP 800-204 and 800-204A for service mesh, API gateways, authentication, authorisation and the further considerations the booklet describes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.