Create or Edit an Exception

Create an Exception to document and gain approval for non-compliance with an Audit or Policy.

To create an Exception:

1.Open the Exceptions workspace.

2. Select New GRC Exception to create a new Exception.

A blank form opens.

3.Enter the information into the fields as required.

Requester Email and Owner Email autopopulate.

Status autopopulates as New.

4.When the status is set to Approving, an email is automatically sent to the Approver, and a record of the approval request appears in the Approvals tab.

5.The approver can vote to Approve or Deny. The Approver needs to provide approval before the Exception can move to the next step. The approver for the Exception is determined by the Exception Type.

After you select an Exception Type, a tab is added for that type.

Based on the Exception Type, an Audit or Policy field is added to choose a record.

6.Select Save.

7.In the Details tab, enter the information into the fields as required.

8.Use the Assets, Controls, and Risk Assessments tabs to link Assets, Controls, and Risk Assessments to the Exception.

Use the Controls tab to create new Controls.

The Audit/Policy tab displays a summary form of the Audit or Policy.

The Approval tab displays the approval details. Every Exception must be approved by the Owner of the Audit or Policy.

You can restore hidden tabs using the plus sign (to the right of the tabs).

9.To approve or deny the Exception, from the Action Menu, select Approve my vote or Deny my vote.

10.Select Save.

Edit an Exception

To edit an Exception:

1.Double-click an Exception.

2.Change the information as needed.

3.Select Save.