HRM-GOV-11Term
Policy exception
An approved, time-bound departure from a security policy for a named person or system, with a reason and an end date. Exceptions past expiry and exception holders who click are readiness signals.
Example
A GRC analyst approves a six-month USB exception for a field engineer and sets a reminder for the review.
Sources
1Related terms
3"Policy exception" (HRM-GOV-11), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/policy-exception
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.