Compensating controls

A compensating control is a list of instructions, procedures or agreements. A compensating control documents the reason for the existence of a violation and also documents the steps taken by the company to mitigate the risks introduced by this violation.

The Compensating Controls page displays a list of compensating controls, the description and validity period. This page also displays the count of rules and the exclusions to which each of the compensating controls is attached.

To create a compensating control or to assign compensating controls to rules, users must be assigned the Business Process Owner role or a role that contains the required permissions. Other users can view the controls on this page but will not be able to take any action on them.

Create a new compensating control by clicking the New icon on the Compensating Controls page. You can also create compensating controls from several other pages such as when you are creating a new rule, or mitigating a violation through the Violations Browser.