1.4.a Examine policies and configuration standards to verify:
• Personal firewall software is required for all mobile and/or employee-owned devices that connect to the Internet (for example, laptops used by employees) when outside the network, and which are also used to access the network.
• Specific configuration settings are defined for personal firewall software.
• Personal firewall software is configured to actively run.
• Personal firewall software is configured to not be alterable by users of mobile and/or employee-owned devices.