This seems to be a reasonable starting point: https://www.gov.uk/government/publications/end-user-devices-security-guidance-ubuntu-1204/end-user-devices-securi

This seems to be a reasonable starting point: https://www.gov.uk/government/publications/end-user-devices-security-guidance-ubuntu-1204/end-user-devices-security-guidance-ubuntu-1204#satisfy https://www.gov.uk/government/publications/end-user-devices-...