Compensating Controls

Compensating controls are documents that are used for mitigating rule violations. A compensating control:

• Documents the reason for the existence of a violation.
• Documents the process to mitigate the risks introduced by a violation.