PT-4: Consent

From NIST's SP800-53:

Implement [Assignment: organization-defined tools or mechanisms] for individuals to consent to the processing of their personally identifiable information prior to its collection that facilitate individuals’ informed decision-making.

Cyber Threat Graph Context

Explore how this control relates to the wider threat graph