Where DevSecOps integrates security objectives and controls into DevOps, management automates, monitors and applies security at every phase with automated unit testing, code analysis and image scanning, gives cybersecurity and design the same priority as in traditional development with security resources involved from the outset, and applies security to application code, application services code, infrastructure as code, policy as code and the further code types NIST describes, with the practices the booklet sets out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.