A statement, used in security control overlays, that extends the basic capability of a security control by specifying additional functionality, altering the strength mechanism, or adding or limiting implementation options.
Sources:
CNSSI 4009-2022
from
CNSSI 1253