Where containers are used, management secures the five architectural tiers and three life cycle phases: developer systems that create images, testing and accreditation systems that validate, verify and sign them, internal and external registries that store and distribute them, orchestrators that convert images into containers and deploy them, and hosts that run them, applying the image, registry, orchestrator, container and host security countermeasures of NIST SP 800-190 that the booklet sets out, and using containers consistently in development, test and production.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.