Exception Requests

UService

There are few circumstances where there could be requests for non-encryption of certain devices or disabling of firewall filtering etc. The requests are classified as miscellaneous exception requests and the requests are handled by UMIT Risk Assessment team on an individual basis.

The exception request process is as follows:

  1. The requestor opens a ServiceNow request with the objectives and assigns it to “Security Compliance” Team.
  2. The Security and Compliance team member reviews the request and performs an assessment of the request.
  3. If further information is required, the Security team member contacts the requestor for such information.
  4. After collecting the required information the Security team, a member performs a comprehensive assessment of the request and provides a decision to the requestor.