2.2.6Implement a consistent security policy and posture

Assets and workflows moving between enterprise and non-enterprise infrastructure should have a consistent security policy and posture. Assets and workloads should retain their security posture when moving to or from enterprise-owned infrastructure. This includes devices that move from enterprise networks to non-enterprise networks (i.e.: remote users). This also includes workloads migrating from on-premises data centers to non-enterprise cloud instances.