← Security+ glossary

Compensating control

An alternative security measure introduced when a vulnerability cannot be patched immediately, with the goal of reducing risk (e.g. isolating the system or an additional rule on the firewall or WAF). Unlike a patch that removes the vulnerability itself, a compensating control leaves the vulnerability present but makes exploiting it harder or impossible for the attacker.

All Security+ guides →