Audit and compliance
Compensating control
Also called: mitigating control, alternative control
A compensating control is an alternative safeguard used where the expected control is not feasible, which must meet the intent of the original requirement and be documented and assessed as such.
See also
Testing, with the report an auditor can actually use
A fixed price, a date, and a report that states scope, method and closure. No discovery call required to get a number.