Policy Exception and Policies

rajeeshraj
Tera Guru

Hello

 

1. When a policy exception is created, the Source type can be selected as Policy, and the system forces you to select a policy. I would like to know what happens when a Policy is approved.

 

2. When the Source type is Control objective, control, or issue, the system forces you to select impacted controls. I believe the Impacted control becomes Exempt when the policy exception is approved. The question here is, should these controls be in the Monitor state to be marked as Exempt?

 

3. When we are creating Policy Exceptions from an Issue or Policy, are we actually requesting exceptions for the controls associated with this issue and policy respectively?

 

Thanks

1 ACCEPTED SOLUTION

Community Alums
Not applicable

Hi @rajeeshraj ,

1. When you have requested an extension on the policy exception and has been approved by the approver then Approved extensionsRemaining extensionsDate approvedExtension dateExtension reasonOriginal valid to fields would appear.

SandeepDutta_0-1694577751514.png

Then you can Request an extension and Review the policy exception and extension request

 

2. The controls should be in Attest,Review or Monitor state.

3. That's correct, with Policy Exceptions from an Issue or Policy, are we actually requesting exceptions for the controls associated with this issue and policy respectively.

 

 

View solution in original post

1 REPLY 1

Community Alums
Not applicable

Hi @rajeeshraj ,

1. When you have requested an extension on the policy exception and has been approved by the approver then Approved extensionsRemaining extensionsDate approvedExtension dateExtension reasonOriginal valid to fields would appear.

SandeepDutta_0-1694577751514.png

Then you can Request an extension and Review the policy exception and extension request

 

2. The controls should be in Attest,Review or Monitor state.

3. That's correct, with Policy Exceptions from an Issue or Policy, are we actually requesting exceptions for the controls associated with this issue and policy respectively.