I would add more layers.
SIEM is missing
MAM is missing.
SASE is missing.
This is more or less a Buzzword Bingo Card.
Why Application Whitelisting, when not also Blocklisting (to not forget, CompTIA changed some names).
Source of this Graphic? Would not use it, without knowing where is coming from. But again, imho not a good graphic.