Purpose:


To ensure that policy exception requests are executed in a controlled manner. It involves assessing the risk of proposed exception and formal approval process for policy exception requests.