Compensating Controls

Compensating controls are documents that are used for mitigating rule violations. Compensating controls can be used for:

• Documenting the reason for the existence of a violation.
• Documenting the process to mitigate the risks introduced by a violation.