Use of Exempt Flag in Control

[SanjivMeher]

Hello Experts,

We have this flag exempt. But I am not sure what is the business use of this.

I know that if issue is accepted, an exception needs to be created. But Who sets the exempt flag?

What happens if exempt flag is checked? Does it not generate indicator tasks if exempt is checked?

How does it get unchecked? Will closing an exception uncheck it automatically and move it back to attest?

[priyajames1]

Hi Sanjiv,

The 2 main purposes of an exempt flag to my knowledge are: 

1. To avoid creating any observation on control.  Because if you make check exempt on the control the Status will not go non-compliant and hence an observation won't create.

2. When we approve a policy exception then exempt flag will be automatically checked as well.

Hope this helps. 

Thanks!

[SanjivMeher]

When we approve a policy exception then exempt flag will be automatically checked as well.

This doesnt happen in my environment. Do we have to add additional script for this?

[Eric Feron]

Hi @Sanjiv Meher , did you get this finally sorted out?

Cheers.

[SanjivMeher · Accepted solution]

Yes. From what I understood, OOB Servicenow doesn't restrict indicator tasks to be created, when control is exempt. But it should and we will have to make changes to the scheduled job/script include to not create indicator task when exempt is true.