thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Common Control

Security or privacy control inherited by multiple systems and provided by an organizational entity.

Definition

Common controls are implemented once and inherited by systems, reducing duplication. Examples include physical security of a data center or enterprise identity management. A common control provider is responsible for implementing and assessing them.

Example

All systems hosted in the agency data center inherit physical and environmental protection controls.

Exam tip

Common controls must still be assessed; inheriting systems rely on their assessment.

Related terms