Hybrid security control is a security control that is implemented in an information system in part as a common control and in part as a system-specific control.