Where applicable, Entity ensures that endpoints with access to critical servers or data must be encrypted to protect from unauthorised access