Cyber Essentials Plus CE+ - Post Apr 2023 - BYOD Devices

So we are gearing up for our CE+ renewal and BYOD devices are now considered 'in scope', how far in scope are testers considering BYOD devices, not every question is going to be relevant nor possible to implement with BYOD devices.

We use Citrix and BYOD devices are not permitted on LAN, they must connect to Citrix via remote access so no BYOD device has direct or VPN LAN Access and only users with corporate devices are permitted to download and upload files via Citrix.

I'm taking questions relating to endpoint security and application updates, user and admin privileges, malware and firewall protection and user passwords and device locking are the ones need that need to be approached with BYOD users and specific policies and education piece put in place to manage these.

Has anyone done similar with CE+ since BYOD became in source in April?

TIA