nerdexam
(ISC)2

CGRC · Question #150

A security control that is inherited by one or more organizational informational systems is known as a... Response:

The correct answer is A. Common Control. A common control is a security control that is implemented once by an organization and then inherited by multiple information systems. This inheritance allows systems to leverage shared security services, reducing redundancy and promoting consistency.

Selection and Approval of Framework, Security, and Privacy Controls

Question

A security control that is inherited by one or more organizational informational systems is known as a... Response:

Options

  • ACommon Control
  • BOperational Controls
  • CSecurity Controls
  • DVisual Controls

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • D
    4% (1)

Why each option

A common control is a security control that is implemented once by an organization and then inherited by multiple information systems. This inheritance allows systems to leverage shared security services, reducing redundancy and promoting consistency.

ACommon ControlCorrect

A common control is a security control developed, implemented, assessed, and monitored by one organization or organizational element but inherited by and shared among multiple information systems, thereby reducing redundant efforts. Systems inheriting a common control do not need to implement or assess it themselves, as they rely on the provider.

BOperational Controls

Operational controls are a category of security controls related to the day-to-day operations, not a classification based on inheritance.

CSecurity Controls

Security controls is a broad term encompassing all measures used to protect information systems, not specifically those inherited.

DVisual Controls

Visual controls are unrelated to security control classification for information systems.

Concept tested: NIST Security Control Classifications - Common Controls

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

Topics

#Common Control#Inherited Controls#Security Control Types#NIST RMF Terminology

Community Discussion

No community discussion yet for this question.

Full CGRC Practice