Exceptions Handling Process Workflow

Request Submission Review Decision

START END

Complete Policy
Exception Request
End User

Form Notify
Department Head

Provide
Email Request Form
Endorsement
to Cybersecurity
Signature
Information Security
Steering Committee

Review Request and

Recommend Action
to CISO
IT Operations

Create Remediation
or Decommission
Plan

NO
NO
NO YES
CISO

Remediation or
Review Notify Other Determine Length
NO Approve Exception? YES Indefinite Approval? YES Decommission
Recommendations Stakeholders? of Approval
Needed?

YES
Stakeholders
Other

Notify