A version-controlled list of approved exceptions, each tied to one rule and one system, with justification, compensating controls, approver and expiry. The policy engine reads it, so a release can pass under a live exception, the verdict says so, and the rule fails again once the exception expires.
- Developed in
- ch. 12, Risk acceptance and exceptions
- Chapters
- ch. 12, Governance Program
- Contrast with
- Risk register
- Source
- Defined by this Body of Knowledge: the section it is developed in is the source
Where it is used
One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.
- 12 · Governance Program The stakeholder map 4 mentions
Related terms
Sources
No external source: the term is coined or used in a specific sense by this Body of Knowledge, and the section linked under "Developed in" is its source.
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .