A small branch office with a limited budget cannot afford to install a dedicated security guard. Instead, the company installs prominent warning signs indicating 24/7 video surveillance and implements a system that requires employees to use their access badges to enter, logging all entries. Which type of control has been implemented as an alternative to the security guard?
A compensating control is an alternative measure used when a primary security control is not feasible due to technical, financial, or operational constraints. In this scenario, the company cannot afford the primary control (a security guard). Instead, it uses a combination of deterrent (warning signs) and technical (access badge logs) controls to provide an alternative layer of security, which functions as a compensating control.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are some examples of compensating controls?
Open an interactive chat with Bash
How do compensating controls differ from preventive controls?
Open an interactive chat with Bash
When would a compensating control typically be implemented?