Common Controls and Inheritance

Continuous Monitoring, Cybersecurity Framework, DIACAP Training, DIARMF, DoD 8570 Compliance, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Northern Virginia, Remote Online Training, Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

By Kathryn M. Farrish, CISSP Common Controls are security controls whose implementation results in a security capability that is inheritable  by multiple information systems (IS). For example, the information systems hosted in a data center will typically inherit numerous security controls from the hosting provider, such as: Physical and environmental security controls Network boundary defense security controls Other inheritance scenarios include agency or departmental-level policies…