Which of the following types of controls should be used to reduce the risk created by this scenario?

A recent audit uncovered a key finding regarding the use of a specific encryption standard in a web application that is used to communicate with business customers. Due to the technical limitations of its customers the company is unable to upgrade the encryption standard .

Which of the following types of controls should be used to reduce the risk created by this scenario?
A . Physical
B . Detective
C . Preventive
D . Compensating

Answer: D