When validated products become available they should be deployed in mission systems; NIAP and the CSfC programme intend to update profiles quickly as validation becomes feasible, and systems outside those programmes follow CNSSP 15 and later deprecation guidance. Meanwhile NSA encourages responsible testing in vendor and government research environments to understand how the larger algorithms affect particular systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.