Statements of security capability to: (i) build in additional, but related, functionality to a security control; and/or (ii) increase the strength of the control. Response:

Security control enhancements are specific statements of security capability that build upon existing security controls by providing additional, related functionality or increasing the strength and rigor of the control itself. These enhancements are typically chosen to address specific organizational security requirements or risk factors beyond the basic control.

A system-specific security control is a control implemented within a particular information system, not a statement of additional capability.

A tailored security control baseline refers to modifying a standard set of controls to fit an organization's specific needs, not adding functionality or strength to individual controls.

Security control inheritance is when an information system or organization can leverage security controls provided by other systems or common services, rather than a statement of additional capability.