PT-4: Consent
From NIST's SP800-53:
Implement [Assignment: organization-defined tools or mechanisms] for individuals to consent to the processing of their personally identifiable information prior to its collection that facilitate individuals’ informed decision-making.
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph