- Compensating Security Controls - whenever the
stakeholders find that one or more of the security controls in
the tailored baseline do not fit with their environment
conditions or are not available, they may decide to replace
such controls with a compensating control