Edit

Item

Description Security control employed in lieu of the recommended controls that provides equivalent or comparable protection for an information system or organization.

Source https://csrc.nist.gov/glossary/term/compensating_security_control

Context