Certified Administrative Professional (CAP) Practice Exam 2026 – Your All-in-One Guide to Exam Mastery!

Compensating control is a type of control put in place when it is not possible to implement the standard baseline control due to constraints such as resource limitations or specific operational conditions. These controls serve to provide an equivalent level of security or risk mitigation, effectively compensating for the lack of the baseline control.

For instance, if a standard security protocol cannot be applied in a specific situation, a compensating control might involve additional monitoring or alternative procedures to mitigate risk. This ensures that even in the absence of the ideal control structure, some degree of protection is maintained.

Other options reflect different types of controls that are used for varying circumstances. Alternative controls would provide different measures that might not directly address the same risks, supplementary controls are meant to enhance existing measures rather than replace them, and corrective controls are designed to address problems after they have occurred, rather than to proactively manage risks. Thus, compensating control is specifically targeted as a substitute when baseline controls cannot be enacted.