Android 9 is unsupported, therefore any device accessing organisational data is unsupported!
We have received a number of questions about Android 9 Teams Phones and the official responses on this from ourselves and confirmed by IASME is as follows:
However, note in the above, that the device here is a "Teams Phone" and it's accessing an "Organisational service" as defined as Microsoft Office 365 - therefore the device is very much in the scope of the assessment and would be End-of-Life.
You will therefore have end-of-life and unsupported devices in use, which is not allowed within the Cyber Essentials standard, thus, these phones will need to be replaced.
+