What Certified Desktop is and why a JCB-managed computer is configured the way it is (encryption, 15-min screen lock, CrowdStrike, CrashPlan, OS + third-party patching, Sassafrass asset tracking), plus a self-check link and answers to common concerns.