Skip to content

13-exception-handling.md

Latest commit

 

History

History
34 lines (28 loc) · 959 Bytes

13-exception-handling.md

File metadata and controls

34 lines (28 loc) · 959 Bytes
Raw

Exception Handling

Exception types

  • Policy exception: temporary deviation from baseline policy.
  • Risk acceptance: risk owner accepts a known risk.
  • Compensating controls: alternative measures to reduce risk.

Required fields

  • Business justification
  • Impacted assets
  • Compensating controls
  • Expiry date
  • Sign-off matrix

Review cadence

  • Exceptions reviewed every 90 days.
  • Expired exceptions trigger escalation to risk owner.

Exception flow

flowchart LR
  A[Request] --> B[Assess]
  B --> C{Approve?}
  C -->|Yes| D[Implement Compensating Control]
  C -->|No| E[Reject]
  D --> F[Review/Expire]
Loading

Diagram

See the exception handling diagram: 22-diagrams/exception-handling.mmd

Related docs