thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Control Inheritance

Situation where a system receives protection from controls implemented by another entity or system.

Definition

Inheritance occurs with common controls and with cloud services, where a customer inherits controls the provider implements, such as physical security. Inherited controls are documented in the SSP with references to the provider's authorization. Shared responsibility must be clear to avoid gaps.

Example

An agency app on a FedRAMP High IaaS inherits PE controls from the cloud provider.

Exam tip

Inheritance does not eliminate responsibility for verifying the provider's controls.

Related terms