Most enterprise security teams rely on compensating controls. And for good reasons, patching every vulnerability on every asset is a fantasy. But here’s the problem: once a control goes in, no one ...