Which of the following best describes a compensating control?
A tool used for real-time monitoring and alerting of security events
A process that involves the identification and eradication of threats
A measure that mitigates risk when primary controls cannot be implemented
A policy that ensures all employees follow a strict security protocol