Every component and all data must be protected at rest, in transit and in use by combined organisational and technical measures. The controller should favour privacy-friendly technology such as masking or scrambling irrelevant areas and editing out third parties when providing footage; functions that are not needed, such as unlimited camera movement, zoom, radio transmission, analysis and audio recording, should not be provided, and if provided must be deactivated.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.