Standard Nine: IT Protections

9.1. All networking components have had their default passwords changed

9.5. Are all laptops and tablets or removable devices that hold or allow access to personal data, encrypted?

Standard Eight: Unsupported Systems
Standard Ten: Accountable Suppliers