For legitimate interest to be available, employers must weigh how proportionate their measures are and any further steps to reduce their scale and impact (as good practice through a DPIA before introducing monitoring technology), and must adopt and circulate acceptable use rules together with privacy notices that set out permitted use of the network and equipment and describe in detail the processing that takes place.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.