Discloses the device's ability to keep transmitted PII confidential: whether PII can be transmitted only over point-to-point dedicated cables, meaning cabling not accessible to the public, inside a physically controlled room or building (TXCF-1); whether PII is encrypted before transmission over a network or removable media, with the standards noted (TXCF-2), and whether customers can configure encryption where it is not on by default (2.1); whether PII can only be sent to a fixed set of network destinations, meaning an explicit per-device mechanism limiting connections and their nature (TXCF-3); whether connections are limited to authenticated systems, with how the limit is achieved and which access-management methods are supported (TXCF-4); and whether secure transmission methods are supported or implemented for DICOM, HL7 or IEEE 11073 (TXCF-5).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.