Printed on: 04/24/2019. Please go to for the most current version of the Policy or related document.

Requesting an Exception to the Information Security Policy

Administrative Procedure


  • Community members must work with their unit IT Director or Department Head.


Units can request Exceptions that will be valid for up to 12 months.

To obtain an exception an IT Director, IT Service Director or Department Head must:

  • initiate the exception process,
  • ensure compensating controls are implemented as required per the exception,
  • re-submit exceptions after the 12 month exception expiration.

Document Feedback