Common controls can be any type of security control or protective measures used to meet the confidentiality, integrity, and availability of your information system. They are the security controls you inherit as opposed to the security controls you select and build yourself.

What are examples of security controls?

Examples include physical controls such as fences, locks, and alarm systems; technical controls such as antivirus software, firewalls, and IPSs; and administrative controls like separation of duties, data classification, and auditing.

What are the three types of security controls?

There are three primary areas or classifications of security controls. These include management security, operational security, and physical security controls.

Common controls are security controls that can support multiple information systems efficiently and effectively as a common capability. They are the security controls that are inherited as opposed to the security controls individually selected.