What is the term for information about enhanced compensatory controls used when standard security measures are insufficient?

• A. Alternative Compensatory Control Measures (ACCM) Information
• B. Anomaly
• C. Approved methods
• D. Approved security container

Answer: (A)

When standard security measures aren’t enough, the additional or enhanced compensatory controls are documented as information about Alternative Compensatory Control Measures. This ACCM Information captures what extra controls are in place, why they’re needed, how long they’ll be used, and how they’ll be monitored and approved. It helps ensure that risk is still properly mitigated and that auditors and security personnel understand the compensatory approach beyond the usual measures. The other options don’t describe this documentation: an anomaly refers to a deviation from normal behavior, approved methods are the standard procedures, and an approved security container is a physical storage item.