Where its Risk Assessment shows this to be appropriate, the Licensee protects Nonpublic Information by encryption or another suitable method in two situations: whenever it is sent across an external network, and whenever it is held on a laptop or on any other portable device or medium used for computing or storage.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.