+ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

If it is necessary to deviate from regulations in a particular case, the exception SHOULD be justified and approved by an authorised body after a risk assessment. There SHOULD be an approval procedure for granting exceptions. An overview of all exemptions granted SHOULD be established and maintained. An appropriate procedure for documentation and a corresponding review process SHOULD be established. All exceptions SHOULD be granted for a limited period.

1. Resumen

Título Estándar

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos
Fuente Requisito

3. Regulaciones relacionadas

Regulaciones
Fuente Regulación

Incidencias vinculadas

Vínculos
Tipo de vínculo Incidencia
blocks G 0.29 Violations of Laws or Regulations