Ongoing management covers keeping the whitelist current as applications are added or updated, patching the whitelisting software itself after testing, extending it to further platforms, performing key management, adapting policy as requirements change, watching the components for operational and security problems, periodically testing that whitelisting still works, and running regular vulnerability assessments. Administrators stay ready to make quick manual whitelist changes to counter emerging threats and correct false positives and negatives, and greylists are monitored and their entries moved to the whitelist or blacklist.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.