A security control that is implemented in an information system in part as a common control and in part as a system-specific control. See also Common Control and System-Specific Security Control. Resp

A hybrid security control is explicitly defined as a control where some aspects are implemented as a common control across multiple systems, while other aspects are specifically implemented and managed for a particular information system. This blending of shared and system-unique responsibilities distinguishes it from purely common or system-specific controls.

A system-specific security control is implemented solely for a particular information system, without shared components with other systems.

Network Security Controls are a category of controls focused on network protection, not a classification based on implementation scope (common vs. system-specific).

A common control is entirely inherited by multiple information systems from an enterprise-wide service or infrastructure, without system-specific modifications.