When a telework device or a remote access server is about to leave the organisation for good, for example when a lease ends or an obsolete PC is recycled, the organisation removes sensitive data from it following the media sanitisation guidance in SP 800-88, and strongly considers erasing all storage completely. Because scrubbing personally owned devices raises its own issues, the organisation considers how it will handle BYOD data scrubbing before authorising BYOD use.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.