Where whitelisting is merited, the organisation first considers the capability built into the host operating system, especially for desktops, laptops and servers under central management, because it is easier and cheaper to manage; only if that is unavailable or unsuitable does it examine third-party solutions with robust centralised management. An organisation that has built-in capability and can dedicate trained staff generally implements whitelisting at least in monitoring mode.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.