Subsidiarity can mean no monitoring at all: where prohibited use can be prevented by blocking websites, blocking should be chosen over continuous monitoring, and prevention should outweigh detection. Section 6.4 adds that if misuse can be prevented, for example with web filters, there is no general entitlement to monitor, and that a blanket ban on personal communication is impractical and may need disproportionate monitoring to enforce.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.