Have regard to further Cyber Assessment Framework outcomes in business processes (understanding threat, identity and access management, understanding data, data in transit and stored data, lessons learned, and device management); change default passwords at initialisation on test networks and services whose compromise could raise the risk to the public network; and apply the permitted-signalling rule of M3.10 to fixed as well as mobile networks. Due: Tier 1 and Tier 2 by 31 March 2028 (new in v1.1).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.