Compensating Controls

Compensating controls are documents that are used for mitigating rule violations. Compensating controls can be used for:

  • Documenting the reason for the existence of a violation.
  • Documenting the process to mitigate the risks introduced by a violation.