ClearPenTest

Audit and compliance

Compensating control

Also called: mitigating control, alternative control

A compensating control is an alternative safeguard used where the expected control is not feasible, which must meet the intent of the original requirement and be documented and assessed as such.

START WITH A CLEAR SCOPE

Testing, with the report an auditor can actually use

Scope an assessment