Technical controls enforce wireless encryption, segment guest networks and detect rogue access points
WPA2 or WPA3 encryption, an isolated guest network and unreachable management interfaces cover wireless only, one piece of the wider network protection and segmentation A.8.20 requires.
The wireless technical facet enforces WPA2 or WPA3 encryption and an isolated guest network with no path to management interfaces, applying A.8.22's segmentation to the wireless side.