CGRC · Question #297
What's another term that is synonymous with a common control? Response:
The correct answer is A. Inherited Control. A common control is often referred to as an inherited control because it is developed, implemented, and monitored by one organizational entity and then 'inherited' by multiple information systems.
Question
What's another term that is synonymous with a common control? Response:
Options
- AInherited Control
- BSecurity Controls
- CCommon Controls
- DCommon Controls Provider
How the community answered
(45 responses)- A89% (40)
- B4% (2)
- C2% (1)
- D4% (2)
Why each option
A common control is often referred to as an inherited control because it is developed, implemented, and monitored by one organizational entity and then 'inherited' by multiple information systems.
A common control is a security control that is applied to multiple information systems, meaning these systems 'inherit' the control from a common source. For example, an organization-wide physical security system or an enterprise identity management system is developed and managed centrally, and individual systems inherit its security.
'Security Controls' is a broad category that includes common controls, but it is not synonymous with the specific concept of a common control.
'Common Controls' is the same term as in the question, not a synonymous alternative.
A Common Controls Provider is the entity responsible for managing common controls, not the control itself.
Concept tested: Risk Management Framework (RMF) - common/inherited controls
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
Topics
Community Discussion
No community discussion yet for this question.