nerdexam
(ISC)2

CGRC · Question #297

What's another term that is synonymous with a common control? Response:

The correct answer is A. Inherited Control. A common control is often referred to as an inherited control because it is developed, implemented, and monitored by one organizational entity and then 'inherited' by multiple information systems.

Selection and Approval of Framework, Security, and Privacy Controls

Question

What's another term that is synonymous with a common control? Response:

Options

  • AInherited Control
  • BSecurity Controls
  • CCommon Controls
  • DCommon Controls Provider

How the community answered

(45 responses)
  • A
    89% (40)
  • B
    4% (2)
  • C
    2% (1)
  • D
    4% (2)

Why each option

A common control is often referred to as an inherited control because it is developed, implemented, and monitored by one organizational entity and then 'inherited' by multiple information systems.

AInherited ControlCorrect

A common control is a security control that is applied to multiple information systems, meaning these systems 'inherit' the control from a common source. For example, an organization-wide physical security system or an enterprise identity management system is developed and managed centrally, and individual systems inherit its security.

BSecurity Controls

'Security Controls' is a broad category that includes common controls, but it is not synonymous with the specific concept of a common control.

CCommon Controls

'Common Controls' is the same term as in the question, not a synonymous alternative.

DCommon Controls Provider

A Common Controls Provider is the entity responsible for managing common controls, not the control itself.

Concept tested: Risk Management Framework (RMF) - common/inherited controls

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf

Topics

#common control#inherited control#security controls#control categorization

Community Discussion

No community discussion yet for this question.

Full CGRC Practice