The following table shows the fields that you must fill on the Request exception form for policy exceptions.

Table 1. Request Exception form
Field Description
Policy Vulnerability Management policy that you’re requesting an exception for.
Control objective Control objectives associated with the policy that you selected. If a policy isn’t selected, all the control objectives are listed.
Valid from Date when the exception starts. The default value is the current date. This date can't be in the past.
Valid until Date that the policy exception expires and the state of the vulnerable item or group changes from Deferred to Open.
Note: The number of days that the policy exception is valid can't exceed the value in the Maximum exception duration (days) field that you set for the policy. For more information, see Create a policy.
Reason Reason for requesting an exception.
Justification Details related to the reason this exception is being requested. This field must be filled in by the remediation owner.