At a minimum, wireless devices apply critical operating system patches and upgrades as soon as available after testing, are configured for local device authentication, use advanced authentication or CSO-approved compensating controls, encrypt all resident CJI, erase cached information including authenticators when a session ends, and run a personal firewall and malicious code protection on full-featured operating systems or an MDM that provides those services from the agency level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.