This section explains how to request global exceptions for entities that are out-of-compliance with a control or subcontrol and you want to override the questionnaire and check results in the compliance and risk scores. The RiskVision solution applies the exception to all assessments with the entity-subcontrol pair. Setting an exception at the control level propagates the override to the subcontrols. If the questionnaire contained a subcontrol only, the global exception applies. You can also create an exception for a finding to override the finding's risk score. In order to request an exception, you must have Exception View and Exception Request permissions.
To request Local exceptions, that is, exceptions for a particular assessment, use the questionnaire. Stakeholders can access the questionnaire from
Folder | Sub-Folder | ||
My Exceptions | By Stage | ReviewSign OffClosed | |
By Type | Control, Finding, Vulnerability | ||
My Exceptions Delegated To Others | |||
My Undelegated Exceptions | |||
All Exception | By Stage | ReviewSign OffClosed | |
By Type | Control, Finding, Vulnerability | ||
All Delegated Exception s | |||
All Undelegated Exceptions |
Note:
- The folder name under the By Stage depends on the workflow stage names
- All Exception folders is available only if users have the object Mange permission privilege
To request an exception:
Go to Home > Exception Requests and click New.
The Exception Request wizard appears.
In the Basic Details wizard page, enter the exception information.
Click Next to continue.
The Recurrence wizard page appears. Specify when you want the exception to be applied again. But, the recurrence is applicable only when you select a start date and end date in the Basic Details wizard page.
Click Next to continue.
Canceling the attachment seems to cancel the entire Exception Request, but it displays after a few moments without an attachment.
The Attach File wizard page appears. Add a document from your desktop, link to a document in repository, or URL.
- Click Finish to exit the wizard and to add an exception on Home > Exceptions page.
The exception has been created, but not requested. Go to the workflow page and submit the exception request.See Managing Your Exception Requests.