A mobile device approved for CJI that is allowed to act as a Wi-Fi hotspot is configured with encryption enabled, a changed default SSID that does not identify the device or the agency, a pre-shared key, port filtering where available and connections only from agency-controlled devices, or an MDM solution provides the same protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.