About Exceptions Management

Overview

Users can request exceptions for policies, procedures, or standards using the Policy module to help track the entire lifecycle of an exception. The exception captures the rationale, comments, and evidence to support the acceptance or rejection of a document upon request. When creating a new exception, users can:

  • Provide a name for the exception.

  • Specify the reason for the exception.

  • Assign an exception approver.

  • Assign an expiration date in which the exception will no longer be valid.

Exceptions also provide temporary relief for non-compliant controls. These controls are dynamically mapped to an exception request based on the controls mapped to the policy, procedure, or standard.



Business Use Cases

Exceptions allows users to:

  • Request temporary exceptions for complying with company policies, procedures, or standards.

  • Track exception requests and conduct detailed reviews prior to approving or rejecting an exception request.

  • Request exceptions in the Employee Portal and Self-Service Portal via attestations or in the My Exceptions tab.

Additional Resources

For more information on the exception features available, see the following articles in the OneTrust Knowledge Base.

Note:

Additional functions and features will be available in upcoming releases.