Use of Exempt Flag in Control

[SanjivMeher]

Hello Experts,

We have this flag exempt. But I am not sure what is the business use of this.

I know that if issue is accepted, an exception needs to be created. But Who sets the exempt flag?

What happens if exempt flag is checked? Does it not generate indicator tasks if exempt is checked?

How does it get unchecked? Will closing an exception uncheck it automatically and move it back to attest?

[SanjivMeher]

Anyone?

[Ajay Guggilla1]

Policy Exception Overview dashboard will display the exempted controls too when the Exempt flag is checked in the control

[SanjivMeher]

But why do we mark a control exempt?

[Gowrisankar Sat]

Setting exempt flag on compliance control will skip the Attestation state and move to review state.

Business Rule:

Skip attestation for exempt controls