A small not-for-profit organization with limited resources is unable to adequately maintain appropriate segregation of duties. Considering the organization's resource constraints, which type of controls would best mitigate segregation of duty risks?
A) Application controls.
B) Detective controls.
C) Preventive controls.
D) Compensating controls.

Question

Quizplus · Accepted Answer

Compensating controls are designed to mitigate risks when ideal controls, such as segregation of duties, cannot be implemented due to resource constraints. They provide alternative measures to reduce risk.

A Small Not-For-Profit Organization with Limited Resources Is Unable to Adequately