Compensating controls are alternative safeguards used when a preferred security control cannot be implemented. They reduce the remaining risk through measures such as network segmentation, monitoring, procedural restrictions, or physical protection.