---
sourceDocument: Zurich Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/governance-risk-compliance

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Define policy categories

# Define policy categories {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

You can filter policies by specific criteria to limit the number of policies
displayed when you are creating policy exceptions.

## Before you begin

Role required: sn_compliance.manager

## Procedure

1. When defining the [Policy Exception
   Integration Registry](https://www.servicenow.com/docs/GLICHE36e~YnQyANF79N6Q "Enable other applications to request policy exception from any table such as Problem or Incident and so on. The applications must be added and configured in the Integration Registry."), click the lock icon on the Policy categories field.
2. In the Policy categories form, click New.
3. Enter the name and description of the category you want to define.
4. Repeat for any other categories you want to define.
5. When you have finished defining categories, click the lock icon again.  
   When you save the registry, the policy categories you defined are available on the Policy form for filtering policies.

## Example

Assume you defined registry entries for the Incident and Problem applications and
selected Incident \[incident\] and Problem \[problem\] as the policy exception target
tables. Also assume you created policy categories of incident
and problem.  
You have defined five policies and they are tagged as follows.

* Policy 1 is tagged incident.
* Policy 2 is tagged incident and VR.
* Policy 3 is tagged VR.
* Policy 4 is tagged Problem.
* Policy 5 is untagged
{#define-policy-categories__ul_qwq_hsy_xlb}

You open the Problem form and click the Request Policy Exception button. You are prompted to enter specific details about
the exception (for example, the policy, control objective, and so forth).

When you click the search icon in the Policy field, only
Policy 1, Policy 2, and Policy 4 appear. If you select one of the three policies and
click the search icon on the Control objective field, only
control objectives related with that policy appear.

If none of your policies are tagged, all 5 appear. If you have only one policy
tagged, that policy appears in the Policy field by default.