+ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

If it is necessary to deviate from regulations in a particular case, the exception SHOULD be justified and approved by an authorised body after a risk assessment. There SHOULD be an approval procedure for granting exceptions. An overview of all exemptions granted SHOULD be established and maintained. An appropriate procedure for documentation and a corresponding review process SHOULD be established. All exceptions SHOULD be granted for a limited period.

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi

Povezane zadeve

Povezave
blocks G 0.29 Violations of Laws or Regulations