A security or privacy control for an information system that is implemented at the system level and is not inherited by any other information system.
Sources:
CNSSI 4009-2022
from
OMB Circular A-130 (2016)
NIST SP 800-137
under System-Specific Security Control
from
CNSSI 4009
A security control for an information system that has not been designated as a common control or the portion of a hybrid control that is to be implemented within an information system.
Sources:
NIST SP 800-30 Rev. 1
under System-Specific Security Control
NIST SP 800-39
under System-Specific Security Control
NISTIR 8170
under System-Specific Security Control