Hi GRC community, I would like to know why on the Policy Exception form, only published policies (via policy records) are available in the drop down list, versus the knowledgebase policy articles? This means that for example, if we have a policy review cycle going on for a subset of policies to publish say version 2.0, that the current version 1.0 (knowledgebase articles) won't be listed to request a policy exception since the policy record is no longer in the published state (i.e, draft, review state). It seems the business should be able to request a policy exception on a published policy listed in the KB). Review cycles can take months and months to get accomplished. What solutions do people have for this? For example, customize the conditions to allow the policy field to include all policies with a published knowledge article?
