3.1.19 Encrypt CUI on mobile devices and mobile computing platforms.

Organizations can employ full-device encryption or container-based encryption to protect the confidentiality of CUI on mobile devices and computing platforms. Container-based encryption provides a more fine-grained approach to the encryption of data and information including encrypting selected data structures such as files, records, or fields. See [NIST CRYPTO].

Actionable Items: Ensure that encryption over wireless is enabled. Use the highest level standard you can for your company. (Also see section 3.1.17)