Add a Compensating Control to a Vulnerability

Once a vulnerability compensating control has been created, it must be added to a vulnerability to have an effect. Vulnerability compensating controls can be added from a vulnerability's Vulnerability Compensating Controls tab by a user with the Threats and Vulnerabilities View and Update permissions.

To add a vulnerability compensating control to a vulnerability:

1. Open the Vulnerabilities menu.

2. Click any page, such as My Vulnerabilities, Vulnerabilities from Scanners or Users, or Inferred Vulnerabilities. 
3. Click a vulnerability.The Vulnerability details page.
4. Click Comp Controls to open the Vulnerability Compensating Controls tab.The Vulnerability Compensating Controls tab.
5. Click Add.
6. In the left window, click + next to each category you wish to open and click the checkbox next to each vulnerability compensating control you wish to add to the vulnerability.Step 1 of the Add Vulnerability Compensating Control to Vulnerability dialogue.
7. Click >> to add the selected vulnerability compensating controls to the right window.
8. Click Next.
9. Enter the initial Detection % and Protection % for each of the vulnerability compensating controls. These values can be changed later. The sum of a single vulnerability compensating control's fields cannot exceed 100%. However, the total sum of all compensating controls may exceed 100%.Step 2 of the Add Vulnerability Compensating Control to Vulnerability dialogue.
10. Click Finish.