thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Hybrid Control

Control implemented partly as a common control and partly by the individual system.

Definition

A hybrid control splits responsibility, such as an organization-wide incident response policy (common) with system-specific procedures. The SSP must document which parts are inherited and which are system-specific.

Example

Contingency planning uses an enterprise policy but each system has its own contingency plan.

Exam tip

Expect questions classifying controls as common, hybrid, or system-specific.

Related terms