control inheritance

{
  "id": "MLC-T-CYB-000937",
  "term": "control inheritance",
  "field": "Cybersecurity",
  "definition": "1. A situation in which a system or application receives protection from controls (or portions of controls) that are developed, implemented, assessed, authorized, and monitored by entities other than those responsible for the system or application; entities either internal or external to the organization where the system or application resides.\n\n2. A situation in which a system or application receives protection from security or privacy controls (or portions of controls) that are developed, implemented, assessed, authorized, and monitored by entities other than those responsible for the system or application; entities either internal or external to the organization where the system or application resides. See common control.",
  "see_also": [
    "common control"
  ],
  "references": [
    "NIST SP 800-37 Rev. 2",
    "NIST SP 800-53 Rev. 5; NIST SP 800-53B; NIST SP 800-53A Rev. 5",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/control-inheritance/"
}