Compensating Controls

A compensating control is a list of instructions, procedures or agreements that supports the existence of a rule violation. A compensating control does the following:

  • Documents the reason for the existence of a violation.
  • Documents the steps taken by the company to mitigate the risks introduced by this violation.
Note: Process Insights does not support compensating controls.

The Compensating Controls page displays a list of available compensating controls, their description and validity period. The dates displayed in the Valid From and Valid Through columns is according to the Infor Risk & Compliance application server time zone. This page also displays the count of rules and the exclusions to which each of the compensating control is attached.

The count of rules next to a compensating control refers to all rules that the control is assigned to. However, when they click the compensating control, logged-in users will see only those rules that they own.

The count of exclusions next to a compensating control refers to the number of objects that were excluded across all the rules to which the compensating control is assigned.

Compensating controls associated with rules are identified with the In Use icon.

Note: When the validity period of a compensating controls association with a rule expires, the system automatically sends a notification to the creator of that compensating control.
Related topics