Compensating Control
Compensating control
A compensating control substitutes for or supplements a desired protection that is difficult to apply immediately, reducing risk.
In context
Examples include narrower access scope and stronger monitoring. The original vulnerability remains, so review residual risk.
Example
If patch compatibility needs verification, responsible personnel reduce asset exposure and define application plans and review timing.
Key distinction
Compensating controls are managed temporary or alternative protection, not a name for permanent neglect.
Explore this field
View map ↗1 planned packsView packs ↗
L0 OverviewL1 FoundationsL2 Advanced
