+ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S)

If it is necessary to deviate from regulations in a particular case, the exception SHOULD be justified and approved by an authorised body after a risk assessment. There SHOULD be an approval procedure for granting exceptions. An overview of all exemptions granted SHOULD be established and maintained. An appropriate procedure for documentation and a corresponding review process SHOULD be established. All exceptions SHOULD be granted for a limited period.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.29 Violations of Laws or Regulations