Annex A 8.1 - User Endpoint Devices

Information stored on, processed by, or accessible via user end point devices shall be protected.