Study. uk . com
  1. Home
  2. All questions
  3. Question 17

CompTIA Security+ study material · question 17 of 611

A data centre's physical security controls are implemented once and relied on by every system hosted there. What are these called, and who is accountable for them?

  1. Common controls, accountable to the control provider
  2. Overlay controls, accountable to the assessor
  3. Baseline controls, accountable to the auditor
  4. Compensating controls, accountable to each system owner
Show the answer

Answer: A. Common controls, accountable to the control provider

A common control is implemented once and inherited; the provider is accountable and inheriting systems document the inheritance.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 › Appendix F, System and Common Control Authorizations

Challenge yourself on this topic → Study as cards