Before allowing personally owned devices for business use, management performs due diligence on the device types, considers the architecture to determine where and how they will access the network while maintaining security, segmentation and access control, provides any additional infrastructure needed for secure use, determines the controls to safeguard the network, and enforces technical policy such as anti-virus, current operating systems and no jailbroken devices.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.