Common control is "a security control that is inherited by one or more organizational information systems."[1]