Referenced by 11.3.7. The FI should implement data loss prevention on personal computers and mobile devices used to access its information assets, commonly through mobile device or mobile application management (verifying before access that the device is not jailbroken, rooted or compromised, with storage encryption, lock and wipe and enforced authentication) or through virtualisation giving on-demand access to enterprise resources, in which strict policies should restrict copying and use of peripherals such as printers and removable storage; either approach may be augmented by other security measures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.