Skip to content
Enterprise risk & controls · Working

Compensating control

Also called: mitigating control

ELI5

An alternative control used when the preferred control is unavailable or insufficient.

Used in conversation

“The board will ask what happens if compensating control moves outside tolerance.”

Pitch context

You will see “Compensating control” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.

Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.

Caution

Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.

When the words have to travel

Need an investor or company deck?

Bring the business, the evidence or the half-formed ask. We help it travel beyond the spreadsheet.

See how pitch.dog can help
Sources & evidence · 3

Direct term-level sources and supporting source families.