Compensating controls are secondary security measures that are put in place to mitigate risk to an acceptable level when the primary control is not feasible. They are an accepted practice in information security management to ensure that, when certain security requirements cannot be met directly, alternative measures provide a comparable level of defense. The question describes a scenario where compensating controls would be appropriate.