A person must not intrude on the privacy of others by surreptitiously listening to, monitoring or recording, or attempting to do so, with any mechanical, electronic or other listening device, a private conversation engaged in by those other persons, or disclose the existence or contents of a conversation so obtained, unless authorized by one of the persons engaged in the conversation. A participant who records is authorized by their own participation. For an employer this covers covert audio monitoring of staff conversations by people who are not in them.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.