A control is implemented centrally by a hosting platform, but each tenant system adds its own configuration on top of the inherited part. In the vocabulary of the Risk Management Framework, how is such a control described?

Question

Answer 1

Show the answer

Answer: B. Hybrid.

The framework splits controls into system-specific, common and hybrid. A control partly inherited and partly implemented by the system itself is hybrid.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 > Keywords