What's inside
- Exception details: reference, submitter, team and the exception owner.
- The standard: its reference, what it requires and who owns it.
- The exception: the proposed approach, why the standard does not fit, the scope and an expiry date.
- Risk and mitigation: the risks introduced, the controls, the residual risk and the plan to return to the standard.
- Approval: three approver levels and a review date.
- An approval path table matching residual risk to the approvers required and a target turnaround in business days.
- A worked example for a TLS exception on a payment gateway integration.
Format: PDF (3 pages) and Word document.
How to use it
Give teams the form as the route for any deviation from a standard, and review each approved exception on its review date.
Get the form and approval path
It is free. We email the download link to your work address.