Important data on smartphones, tablets and laptops is protected. Partially achieved: devices holding important data are known and meet the security baseline, and data on them is technically secured. Achieved: such devices are catalogued, organisationally controlled and configured to platform best practice, can be remotely wiped, and hold minimal data with some automatic deletion.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.