Based on their risk assessment, agencies may decide that further policy provisions and controls are needed; agencies must put those additional controls and protocols in place before BYOD goes live.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.