A security control or privacy control that is implemented in an information system in part as a common control and in part as a system-specific control. See Common Control and System-Specific Security Control.
Source: NIST SP 800-53A Rev. 4 | Category:
