Exceptions Handling Process Workflow
Request Submission Review Decision
START END
Complete Policy
Exception Request
End User
Form Notify
Department Head
Provide
Email Request Form
Endorsement
to Cybersecurity
Signature
Information Security
Steering Committee
Review Request and
Recommend Action
to CISO
IT Operations
Create Remediation
or Decommission
Plan
NO
NO
NO YES
CISO
Remediation or
Review Notify Other Determine Length
NO Approve Exception? YES Indefinite Approval? YES Decommission
Recommendations Stakeholders? of Approval
Needed?
YES
Stakeholders
Other
Notify