For telework mobile devices the organisation uses centralised security management wherever a platform offers it, above all for devices it controls, for example to restrict which applications can be installed and used; built-in protections such as device lock and encryption are enabled; and because capabilities vary by device type and product, the organisation gives the administrators and users responsible for securing them guidance on how to do it. Where mobile device and PC policies are separate documents they cross-reference each other closely.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.