Glossary: Vulnerability Management and Monitoring

compensating control

Also written: compensating controls

A different safeguard that reduces the same risk while the real fix waits, such as a firewall rule, a WAF rule or extra monitoring. The flaw is still there, so the finding stays open.