The backup policy extends to telework PCs and to mobile devices. Where backups travel from the device to an organisational system the communications are encrypted and integrity-checked, and where backups are made locally to removable media the copy gets protection no weaker than the original, so encrypted data stays encrypted in its backup.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.