home/glossary/Compensating Security Control

Compensating Security Control

nounverified·updated May 18, 2026

A management, operational, and/or technical control (i.e., safeguard or countermeasure) employed by an organization in lieu of a recommended security control in the low, moderate, or high baselines that provides equivalent or comparable protection for an information system. NIST SP 800-53: A management, operational, and technical control (i.e., safeguard or countermeasure) employed by an organization in lieu of the recommended control in the baselines described in NIST Special Publication 800-53 or in CNSS Instruction 1253, that provide equivalent or comparable protection for an information system.

MWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Senses

NISTIR 7298: Glossary of Key Information Security Terms, Revision 2sense 2 pending review

The management, operational, and technical controls (i.e., safeguards or countermeasures) employed by an organization in lieu of the recommended controls in the baselines described in NIST Special Publication 800-53 and CNSS Instruction 1253, that provide equivalent or comparable protection for an information system.

NIST SP 800-37

The management, operational, and technical controls (i.e., safeguards or countermeasures) employed by an organization in lieu of the recommended controls in the low, moderate, or high baselines described in NIST Special Publication 800-53, that provide equivalent or comparable protection for an information system.

Classifications

Entity Type

Control95%rule-basedr:entity.control.safeguard.v1
?unassignedlast reviewed

Sensitivity

unclassified

Information Class

unclassified

Variants

alternatephrasing
Compensating Security Controls
plural
Compensating Security ControlsCompensating Security Controlses
possessive
Compensating Security Control'sCompensating Security Controls's
pluralpossessive
Compensating Security Controls'Compensating Security Controlses'