writing compensating controls Posted on September 3, 2010 by michael The PCI Guru has a nice reference on writing compensating controls for PCI requirements you “can’t” meet.