Security controls that can support multiple information systems efficiently and effectively as a common capability. Their implementation results in a security capability that is inheritable by multipl

Common controls are defined as security controls that are developed, implemented, assessed, and monitored by an organization and then made available for inheritance by multiple organizational information systems. This approach allows for efficient and effective security management by reducing duplication of effort, as a single implementation can benefit numerous systems.

A Common Controls Provider is the organizational entity responsible for implementing and managing common controls, not the controls themselves.

An Inherited Control refers to a specific control that a system inherits from a common control provider, but 'Common Controls' is the broader category describing these shared capabilities.

Security Controls is a general term for any safeguard or countermeasure, but it does not specifically denote controls shared across multiple systems.