Site-specific controls are typically implemented by an organization as what type of controls? Response:

Technical controls are hardware or software-based mechanisms, such as firewalls or encryption, not a classification of how controls are applied across sites.

System specific controls are unique to a particular information system and are not typically applied across an entire site to be inherited by multiple systems.

Hybrid controls are a mix of common and system-specific controls, but the question asks about the primary classification of site-specific controls themselves.

Common controls are security controls that are inherited by multiple information systems because they are established at an organizational level, such as site-specific security policies or physical security measures for an entire facility. These controls provide a basis for security across various systems within a shared environment, reducing duplication of effort and ensuring consistent application.