When organisations use action cameras, phone cameras or webcams, they should record only in places people would reasonably expect, secure the device and any memory cards against loss, tell people by signage or announcement before recording where possible, edit or crop footage to reduce harm to others, provide the same security and governance as other systems, and explore the use in a DPIA beforehand.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.