What are compensating controls? When would an auditor need to identify compensating controls, and how can the auditor determine whether they serve their intended purpose? For example, what would be possible compensating controls for not having separate personnel collect cash from customers and record that a sale has occurred for a fashion retailer?