Frameworks & beheersing
Compensating control
A compensating control (alternative control) is a control measure put in place when a required control is difficult or impractical to implement. This control must provide equivalent or greater protection than the original control and must be thoroughly documented and approved.
Source: COSO Internal Control: Integrated Framework (2013); PCI DSS v4.0, Appendix B
Last updated: