Intrusion prevention systems are used. The guide expects IPS or IDS coverage of the internal network, DMZ and wireless network, with periodic configuration review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.