M.4 Protection of management traffic between IAB-node and OAM
33.5013GPPRelease 18Security architecture and procedures for 5G SystemTS
If management traffic uses the user plane via PDU session, it shall be protected using the user plane security mechanism as specified in clause 6.6.
Annex N (normative):
Security for URLLC services