Risk exceptions are used to register the decision of accepting rather than mitigating a risks. Risk exception begins with identifying an exposure. This is recognizing an area where you are not compliant with policies, laws or regulations in place. Your resources are at risk for exposure to malicious activity or for penalties due to non-compliance.
Follow the below steps:
1. Log into the system
2. Go to “Risk Mgt” module
3. Click on “Risk Management” sub module
4. Click on “Risk Exceptions” link
5. This is to view the risk exception management i.e. title, description, risk score, residual score and the current status.
NB: Advance Search button used to perform a quick search, Export to Excel should you wish to export the list and the Print option should you need a print out of the same.
6. Click on “Add Risk Exception” button to add an exception
7. Fill in the details in the pop out risk exception form i.e. title, description, expiration date, requesters and the exception status as shown the below example
8. Once done click on the “Add” button to submit the details
9. Risk exception will be saved as shown below
