Requesting and approving an exception for a remediation task

You can request to defer the remediation of a remediation task for a specified period. Users who are a part of the approver group can approve exception requests.

Note:

Starting with v14.9 of Configuration Compliance, the following terms have been renamed:

Table 1. Changes in terminology

Terminology prior to v14.9	Terminology v14.9 onwards
Test Result Group	Remediation Task
Group Rules	Remediation Task Rules
Policy	Test group

To request or approve exception requests, see:

• Request an exception for a remediation task in Configuration Compliance
• Approve an exception request in Configuration Compliance

Note:

Email notifications are sent at every stage of exception management, providing the status and other details of a request. For example, when an exception is requested, the requester receives an email confirming that the request is raised. The approver also receives an email stating that an exception has been requested.

Starting from v14.11 of Configuration Compliance, you can configure the time frames for approving exceptions, along with email notifications for both the approver and requester after a set number of days. When a request is raised, the test result changes to In-Review status and a state change record is created. If the approver doesn't respond within the configured time frame, the test result reverts to Open status. The previous state is stored in the backup_state field. For more information, see Configure approval rules for Exception Management.

• Request an exception for a remediation task in Configuration Compliance
  Request an exception to defer the remediation of a remediation task for a specified period if it can’t be remediated immediately.
• Request an extension for an exception rule in Configuration Compliance
  Request an extension for a deferred exception rule before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.
• Request an exception for remediation tasks using GRC: Policy and Compliance Management
  Request policy exceptions using the GRC policy exception management capability in the Policy and Compliance Management application from within Configuration Compliance.
• Approve an exception request in Configuration Compliance
  Approve exception requests for remediation tasks that can't be remediated immediately. You must assess these requests for risk and then approve them for deferral until they can be remediated.
• Define policy reason mappings
  You can define the reason choices to be available to any user who requests an exception.