A recent audit uncovered a key finding regarding the use of a specific encryption standard in a web application that is used to communicate with business customers. Due to the technical limitations of its customers, the company is unable to upgrade the encryption standard. Which of the following types of controls should be used to reduce the risk created by this scenario?

Question

Quizplus · Accepted Answer

Compensating controls are alternative measures that are put in place to mitigate risk when the primary control (upgrading the encryption standard) cannot be implemented.

A Recent Audit Uncovered a Key Finding Regarding the Use