CGRC · Question #150
A security control that is inherited by one or more organizational informational systems is known as a... Response:
The correct answer is A. Common Control. A common control is a security control that is implemented once by an organization and then inherited by multiple information systems. This inheritance allows systems to leverage shared security services, reducing redundancy and promoting consistency.
Question
A security control that is inherited by one or more organizational informational systems is known as a... Response:
Options
- ACommon Control
- BOperational Controls
- CSecurity Controls
- DVisual Controls
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- D4% (1)
Why each option
A common control is a security control that is implemented once by an organization and then inherited by multiple information systems. This inheritance allows systems to leverage shared security services, reducing redundancy and promoting consistency.
A common control is a security control developed, implemented, assessed, and monitored by one organization or organizational element but inherited by and shared among multiple information systems, thereby reducing redundant efforts. Systems inheriting a common control do not need to implement or assess it themselves, as they rely on the provider.
Operational controls are a category of security controls related to the day-to-day operations, not a classification based on inheritance.
Security controls is a broad term encompassing all measures used to protect information systems, not specifically those inherited.
Visual controls are unrelated to security control classification for information systems.
Concept tested: NIST Security Control Classifications - Common Controls
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.