noc26.jpg
.: writing compensating controls
The PCI Guru has a nice reference on writing compensating controls for PCI requirements you "can't" meet.